From 6db11cf3320ee8169047600562ea1bbfd442f95a Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 17 May 2022 00:31:44 +0200
Subject: [PATCH] gitea: Escape git fetch args in repo migration

https://github.com/go-gitea/gitea/pull/19487
https://nvd.nist.gov/vuln/detail/CVE-2022-30781

Fixes: CVE-2022-30781
---
 pkgs/applications/version-management/gitea/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/applications/version-management/gitea/default.nix b/pkgs/applications/version-management/gitea/default.nix
index e1a48c28ec7b..8a60f9e9b2f2 100644
--- a/pkgs/applications/version-management/gitea/default.nix
+++ b/pkgs/applications/version-management/gitea/default.nix
@@ -44,6 +44,11 @@ buildGoPackage rec {
       url = "https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48.patch";
       sha256 = "0vvaqqhmx3gkw8fa64ifk2x546zsvlmf65grk29lhzsw1y148sy9";
     })
+    (fetchpatch {
+      name = "CVE-2022-30781.patch";
+      url = "https://github.com/go-gitea/gitea/commit/42e37e686b90216c6ba96f531deeda6d7361d093.patch";
+      sha256 = "sha256-9Js7cWjM3Vn+Y36mJ8V2EeIy4SooAipawNVP8nCobFQ=";
+    })
   ];
 
   postPatch = ''