invidious: patch CVE-2026-58447 (#543507)

This commit is contained in:
Gaétan Lepage
2026-07-19 19:45:53 +00:00
committed by GitHub

View File

@@ -3,6 +3,7 @@
callPackage,
crystal,
fetchFromGitHub,
fetchpatch2,
librsvg,
pkg-config,
libxml2,
@@ -41,6 +42,15 @@ crystal.buildCrystalPackage rec {
inherit (versions.invidious) hash;
};
patches = [
# Remove with the first release containing this commit.
(fetchpatch2 {
name = "CVE-2026-58447.patch";
url = "https://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45.patch?full_index=1";
hash = "sha256-0pf6eu0ckQ2gYHLr2tEDy+1dvAhVjepG26kuxuHbZl8=";
})
];
postPatch =
let
# Replacing by the value (templates) of the variables ensures that building