mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-07-21 16:11:22 +00:00
invidious: patch CVE-2026-58447 (#543507)
This commit is contained in:
@@ -3,6 +3,7 @@
|
||||
callPackage,
|
||||
crystal,
|
||||
fetchFromGitHub,
|
||||
fetchpatch2,
|
||||
librsvg,
|
||||
pkg-config,
|
||||
libxml2,
|
||||
@@ -41,6 +42,15 @@ crystal.buildCrystalPackage rec {
|
||||
inherit (versions.invidious) hash;
|
||||
};
|
||||
|
||||
patches = [
|
||||
# Remove with the first release containing this commit.
|
||||
(fetchpatch2 {
|
||||
name = "CVE-2026-58447.patch";
|
||||
url = "https://github.com/iv-org/invidious/commit/77ad41678b45c4f6815940123f1796fc51259f45.patch?full_index=1";
|
||||
hash = "sha256-0pf6eu0ckQ2gYHLr2tEDy+1dvAhVjepG26kuxuHbZl8=";
|
||||
})
|
||||
];
|
||||
|
||||
postPatch =
|
||||
let
|
||||
# Replacing by the value (templates) of the variables ensures that building
|
||||
|
||||
Reference in New Issue
Block a user