cardboard: set meta.knownVulnerabilities

As reported by https://github.com/NixOS/nixpkgs/issues/90735

+17 -12
+17 -12
pkgs/applications/window-managers/cardboard/default.nix
··· 57 57 in 58 58 stdenv.mkDerivation rec { 59 59 pname = "cardboard"; 60 - version = "0.pre+unstable=2021-05-10"; 60 + version = "unstable=2021-05-10"; 61 61 62 62 src = fetchFromGitLab { 63 63 owner = "cardboardwm"; 64 - repo = pname; 64 + repo = "cardboard"; 65 65 rev = "b54758d85164fb19468f5ca52588ebea576cd027"; 66 66 hash = "sha256-Kn5NyQSDyX7/nn2bKZPnsuepkoppi5XIkdu7IDy5r4w="; 67 67 }; ··· 73 73 pkg-config 74 74 unzip 75 75 ]; 76 + 76 77 buildInputs = [ 77 78 ffmpeg 78 79 libGL ··· 93 94 ]; 94 95 95 96 postPatch = '' 96 - (cd subprojects 97 - tar xvf ${cereal-wrap} 98 - unzip ${cereal-wrapdb} 99 - cp -r ${expected-wrap} ${expected-wrap.name} 100 - cp -r ${wlroots-wrap} ${wlroots-wrap.name} 101 - ) 97 + pushd subprojects 98 + tar xvf ${cereal-wrap} 99 + unzip ${cereal-wrapdb} 100 + cp -r ${expected-wrap} ${expected-wrap.name} 101 + cp -r ${wlroots-wrap} ${wlroots-wrap.name} 102 + popd 102 103 103 104 sed '1i#include <functional>' -i cardboard/ViewAnimation.h # gcc12 104 105 ''; ··· 112 113 113 114 env.NIX_CFLAGS_COMPILE = toString [ "-Wno-error=array-bounds" ]; # gcc12 114 115 115 - meta = with lib; { 116 + meta = { 116 117 homepage = "https://gitlab.com/cardboardwm/cardboard"; 117 118 description = "A scrollable, tiling Wayland compositor inspired on PaperWM"; 118 - license = licenses.gpl3Only; 119 - maintainers = with maintainers; [ AndersonTorres ]; 120 - platforms = with platforms; unix; 119 + license = lib.licenses.gpl3Only; 120 + maintainers = with lib.maintainers; [ AndersonTorres ]; 121 + inherit (wayland.meta) platforms; 122 + knownVulnerabilities = [ 123 + "CVE-2020-11104 (inherited from cereal 1.3.0)" 124 + "CVE-2020-11105 (inherited from cereal 1.3.0)" 125 + ]; 121 126 }; 122 127 }