From f21c7a0f06450cfa39a91d81986ef148a9913ecd Mon Sep 17 00:00:00 2001
From: Ratchanan Srirattanamet <peathot@hotmail.com>
Date: Mon, 5 Jan 2026 00:36:03 +0700
Subject: [PATCH] zoneminder: 1.36.36 -> 1.36.38, fixes CVE-2026-27470

Changelog:
- https://github.com/ZoneMinder/zoneminder/releases/tag/1.36.37
- https://github.com/ZoneMinder/zoneminder/releases/tag/1.36.38
---
 pkgs/by-name/zo/zoneminder/package.nix | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/pkgs/by-name/zo/zoneminder/package.nix b/pkgs/by-name/zo/zoneminder/package.nix
index 825ba7a6a92d..a2eb9719205e 100644
--- a/pkgs/by-name/zo/zoneminder/package.nix
+++ b/pkgs/by-name/zo/zoneminder/package.nix
@@ -2,7 +2,6 @@
   stdenv,
   lib,
   fetchFromGitHub,
-  fetchpatch,
   fetchurl,
   cmake,
   makeWrapper,
@@ -84,24 +83,17 @@ let
 in
 stdenv.mkDerivation rec {
   pname = "zoneminder";
-  version = "1.36.36";
+  version = "1.36.38";
 
   src = fetchFromGitHub {
     owner = "ZoneMinder";
     repo = "zoneminder";
     tag = version;
-    hash = "sha256-q+LpM8JSjcroGa04CqQ7PUU/WvZ9YCVhGOhwBAhOFY0=";
+    hash = "sha256-c/Q+h0ntJ4XUuvgrLSlWfue4GL4nGARgmXt0En334Y4=";
     fetchSubmodules = true;
   };
 
   patches = [
-    # Fix building against FFmpeg 8.0
-    # https://github.com/ZoneMinder/zoneminder/pull/4466
-    (fetchpatch {
-      url = "https://github.com/peat-psuwit/zoneminder/commit/15241687e9ccd97d7866cc7245324472ff6c7f0e.patch";
-      hash = "sha256-DXeoYOMI3Hcpwshg6wiBxaoTPOswLVV3Weq3Mh5Vaw0=";
-    })
-
     ./default-to-http-1dot1.patch
     ./0001-Don-t-use-file-timestamp-in-cache-filename.patch
   ];