Commit 901f7eec authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

misskey: apply patch for CVE-2025-24896 

Upgrade does not appear to be straightforward.

https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm
parent 98b8c3e5

pkgs/by-name/mi/misskey/package.nix

+10 −0
Original line number Diff line number Diff line
@@ -3,6 +3,7 @@ 
  lib,

  nixosTests,

  fetchFromGitHub,

  fetchpatch,

  nodejs,

  pnpm_9,

  makeWrapper,
@@ -28,6 +29,15 @@ stdenv.mkDerivation (finalAttrs: { 
    fetchSubmodules = true;

  };



  patches = [

    (fetchpatch {

      # https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm

      name = "CVE-2025-24896.patch";

      url = "https://github.com/misskey-dev/misskey/commit/ba9f295ef2bf31cc90fa587e20b9a7655b7a1824.patch";

      hash = "sha256-jNl2AdLaG3v8QB5g/UPTupdyP1yGR0WcWull7EA7ogs=";

    })

  ];



  nativeBuildInputs = [

    nodejs

    pnpm_9.configHook