From 37c67710b78f6639f7d4686f865e77dade90bfb3 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Mon, 4 Aug 2025 14:41:27 +0200 Subject: [PATCH] discourse: 3.4.4 -> 3.4.6 https://meta.discourse.org/t/3-4-5-security-fixes-release/369347 https://meta.discourse.org/t/3-4-6-security-fix-release/370631 Fixes: CVE-2025-48877, CVE-2025-48062, CVE-2025-48053, CVE-2025-49845 --- pkgs/servers/web-apps/discourse/default.nix | 4 ++-- pkgs/servers/web-apps/discourse/rubyEnv/Gemfile.lock | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/servers/web-apps/discourse/default.nix b/pkgs/servers/web-apps/discourse/default.nix index e8186c8b7716..5c3e8b6c1dbc 100644 --- a/pkgs/servers/web-apps/discourse/default.nix +++ b/pkgs/servers/web-apps/discourse/default.nix @@ -46,13 +46,13 @@ }@args: let - version = "3.4.4"; + version = "3.4.6"; src = fetchFromGitHub { owner = "discourse"; repo = "discourse"; rev = "v${version}"; - sha256 = "sha256-rA42fOhSJVrNPcFSB2+On7JVeZch8t2yNo+36UK+QcA="; + sha256 = "sha256-HS13jNhSrPo7CHAk2zZEKSt54lBTw1PdMCIJUO0rjLc="; }; ruby = ruby_3_3; diff --git a/pkgs/servers/web-apps/discourse/rubyEnv/Gemfile.lock b/pkgs/servers/web-apps/discourse/rubyEnv/Gemfile.lock index 92f647c7d9de..c05f581c03f3 100644 --- a/pkgs/servers/web-apps/discourse/rubyEnv/Gemfile.lock +++ b/pkgs/servers/web-apps/discourse/rubyEnv/Gemfile.lock @@ -745,4 +745,4 @@ DEPENDENCIES zeitwerk BUNDLED WITH - 2.6.6 + 2.6.9