nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-03 13:30:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Backport release-26.05] jellyfin: backport two security fixes from 12.0 (#566858)

Browse Source
This commit is contained in:
Rémi NICOLE
2026-09-26 14:02:36 +00:00
committed by GitHub
parent 1864af0cdd 01af74ec61
commit f5e94f0b1e
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
pkgs/by-name/je/jellyfin/package.nix
View File

@@ -32,6 +32,18 @@ buildDotnetModule (finalAttrs: {
hash = "sha256-TxGo+sLLG+C9omxrwvO6byzw+iRqONVLXrQKwkrY22s=";
})
# GHSA-6828-c7cx-hvqm: confine virtual-folder operations to the libraries root.
(fetchpatch {
url = "https://github.com/jellyfin/jellyfin/commit/0c560b22ce73323329645b836c9910abc257ce4e.patch";
hash = "sha256-K/og9MDP4BNexkDGLOm346O9anqAjb13UViSAmOw2OA=";
})
# GHSA-4vx8-xhc9-qg6x: enforce remote-control permissions between user sessions.
(fetchpatch {
url = "https://github.com/jellyfin/jellyfin/commit/dd7de4187879082e10b474856f705b6c5d9b963a.patch";
hash = "sha256-OCj4aaKaX4F/+KbCz6BAsifdYe/6BOu6y39ZgMSUKFA=";
})
# Fix MaxLoginAttempts not honored.
# https://github.com/jellyfin/jellyfin/pull/17274
(fetchpatch {