Unverified Commit a92ae468 authored by Robert Scott's avatar Robert Scott Committed by GitHub
Browse files

misskey: apply patch for CVE-2025-24896 (#388822)

parents 9ad3c3ce 901f7eec

pkgs/by-name/mi/misskey/package.nix

+10 −0
Original line number Diff line number Diff line
@@ -3,6 +3,7 @@ 
  lib,

  nixosTests,

  fetchFromGitHub,

  fetchpatch,

  nodejs,

  pnpm_9,

  makeWrapper,
@@ -28,6 +29,15 @@ stdenv.mkDerivation (finalAttrs: { 
    fetchSubmodules = true;

  };



  patches = [

    (fetchpatch {

      # https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm

      name = "CVE-2025-24896.patch";

      url = "https://github.com/misskey-dev/misskey/commit/ba9f295ef2bf31cc90fa587e20b9a7655b7a1824.patch";

      hash = "sha256-jNl2AdLaG3v8QB5g/UPTupdyP1yGR0WcWull7EA7ogs=";

    })

  ];



  nativeBuildInputs = [

    nodejs

    pnpm_9.configHook