nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-07-21 16:11:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

gitea: Escape git fetch args in repo migration

Browse Source 
https://github.com/go-gitea/gitea/pull/19487
https://nvd.nist.gov/vuln/detail/CVE-2022-30781

Fixes: CVE-2022-30781
This commit is contained in:
Martin Weinelt
2022-05-17 00:31:44 +02:00
parent fbbe8ed7e0
commit 6db11cf332
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkgs/applications/version-management/gitea/default.nix
View File

@@ -44,6 +44,11 @@ buildGoPackage rec {
url = "https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48.patch";
sha256 = "0vvaqqhmx3gkw8fa64ifk2x546zsvlmf65grk29lhzsw1y148sy9";
})
(fetchpatch {
name = "CVE-2022-30781.patch";
url = "https://github.com/go-gitea/gitea/commit/42e37e686b90216c6ba96f531deeda6d7361d093.patch";
sha256 = "sha256-9Js7cWjM3Vn+Y36mJ8V2EeIy4SooAipawNVP8nCobFQ=";
})
];
postPatch = ''