Commit 72b75a16 authored by Fernando Rodrigues's avatar Fernando Rodrigues Committed by Masum Reza
Browse files

below: 0.8.1 -> 0.9.0 

Fixes CVE-2025-27591: https://security.opensuse.org/2025/03/12/below-world-writable-log-dir.html



Signed-off-by: default avatarFernando Rodrigues <alpha@sigmasquadron.net>
parent b37ee274

pkgs/by-name/be/below/package.nix

+6 −3
Original line number Diff line number Diff line
@@ -11,17 +11,20 @@ 


rustPlatform.buildRustPackage rec {

  pname = "below";

  version = "0.8.1";

  version = "0.9.0";



  src = fetchFromGitHub {

    owner = "facebookincubator";

    repo = "below";

    tag = "v${version}";

    hash = "sha256-87Fdx3Jqi3dNWM5DZl+UYs031qn2DoiiWd3IysT/glQ=";

    hash = "sha256-tPweJFqhZMOL+M08bDjW6HPmtuhr9IXJNP0c938O7Cg=";

  };



  # Upstream forgot to commit an up-to-date lockfile.

  cargoPatches = [ ./update-Cargo.lock.patch ];



  useFetchCargoVendor = true;

  cargoHash = "sha256-iRDe3zg7tfEYGLCRY6bJ6OdoT8ej0MB/vteCIf5xqNA=";

  cargoHash = "sha256-uNeWdsvJtkUz3E1NL10heDC7B55yKzDMMYzRhEE32EQ=";



  prePatch = ''

    sed -i "s,ExecStart=.*/bin,ExecStart=$out/bin," etc/below.service

pkgs/by-name/be/below/update-Cargo.lock.patch

0 → 100644
+3079 −0

File added.

Preview size limit exceeded, changes collapsed.