mastodon: patch CVE-2026-66066/GHSA-xr9x-r78c-5hrm in activesupport gem

This commit is contained in:
Kerstin Humm
2026-07-30 12:13:56 +02:00
parent dc09f3c60d
commit 54c08d3c5b
2 changed files with 40 additions and 33 deletions
+32 -32
View File
@@ -22,10 +22,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1w40bbkjd0lds57bfr24hbj9qfkwj9v33x6457g24sjfwispzg75";
sha256 = "06yrlf0a6jnlcigvnhdsdskvf368cwi0ypz2vzps6y68jn154673";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
actionmailbox = {
dependencies = [
@@ -40,10 +40,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "0ndf98dpzmz8xs6m253zpwnhyfrvxdkfyvssxps0vrx0x9sa8zfz";
sha256 = "071b1103h7xsrrx73wbdj8mp7b0x99lr6pj3ivg3m13x15r4jw2z";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
actionmailer = {
dependencies = [
@@ -61,10 +61,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "13a4329lgrda8s9mqrfbaakvc90i6ak82rfpljmd0w5vj54747w3";
sha256 = "0g64lm550x0sx2ad5sgwmx19jg9acj98hih6q33a00pz50dl9sl8";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
actionpack = {
dependencies = [
@@ -88,10 +88,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "18r93ii2ayw8n60qsx259dy8nwgbfxf3ndncla0xbia79np8r6dg";
sha256 = "1l13fy0y55h5c5ccm7c94mwfhf6bk5xj83qv1d3izs288lavfk4p";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
actiontext = {
dependencies = [
@@ -107,10 +107,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1ln7mwflqf7nsgkj9lm1p7bmc6h8yqaa47q1cdj9xsp102f034fj";
sha256 = "1wlam4mqrxfsylsyf01yc7907ramis3kisgfn7frr8ni6gc2k9sx";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
actionview = {
dependencies = [
@@ -130,10 +130,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "0pgxl9p2q2zbwb6626yw7rgpbmv2bvxykq2w1h83inrygy6chiqk";
sha256 = "1dng2b5bbjm4c1bcpak7q9w4zh71mz2nkknipszl6yy42j28p9id";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
active_model_serializers = {
dependencies = [
@@ -163,10 +163,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1lz8bxb6pcf9yvxwyj6355aws3ylxi5rwc577ly4q858d9vb2jd1";
sha256 = "0jlm75lxj7bjd67jkgclzlrhlm9sj4ywdzngxq6z83ckvxsx538w";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
activemodel = {
dependencies = [ "activesupport" ];
@@ -178,10 +178,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "06c23jww82grgvxw19g4bi9c957aj5hh24wzyyw4jdpg9jz5rh4h";
sha256 = "124gi0hlvkabkl5fzfn90ylj7gbyg22rv5208k8p3hxf5z705k4r";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
activerecord = {
dependencies = [
@@ -197,10 +197,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1avhmih54xqyj14zrv6ciw2ndpb11bmkwq0fcwm0mfk64ixvw0w0";
sha256 = "0fs0q1c35k2bh079kj1xbx9pvqx7q2z4k9d32fqgcf29iz1bcbqa";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
activestorage = {
dependencies = [
@@ -214,10 +214,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "0k9q8sdlf576r8rp2hgdxy5lpr8f157bpq8mfsk52f8l169wwr05";
sha256 = "1vv3c41nfsii6j2nl80mbgffld96s4ak3zfjk6jgy73v717jamgm";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
activesupport = {
dependencies = [
@@ -244,10 +244,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "03m2vjhq3nmc8c3hpivxhvkjd8igg16nmv0p2fgdsgacppgy1991";
sha256 = "0xhkhdx8svhaf439y398yixik0snzarnnsy43688p92yy9jqfic5";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
addressable = {
dependencies = [ "public_suffix" ];
@@ -741,10 +741,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1c2i64xsd35vijnb50rxb70g508s0x674xi0qpyyb8jy7bncl4j4";
sha256 = "1qfi2ns3zwkgq616fc127xiqhan7g7m7gqpwriwcr34nds1vxwdj";
type = "gem";
};
version = "1.3.7";
version = "1.3.8";
};
connection_pool = {
groups = [
@@ -1112,10 +1112,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1ncmbdjf2bwmk0jf5cxywns9zbxyfiy4h4p3pzi7yddyjhv81qrq";
sha256 = "1raacipbb5m0176w05m3n21ip91w7i0cb5zjqhkz2nqgf234kcm9";
type = "gem";
};
version = "6.0.4";
version = "6.0.6";
};
erubi = {
groups = [
@@ -2322,10 +2322,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "03ga2h4i5hsk8pdlicyfvqfsbh55vrbikb0nkx9x7vx7fl6kdw19";
sha256 = "1px886qvws5zvqphy5cysj8vg01lym0w7vs9wq1h41pk1pjlxaln";
type = "gem";
};
version = "0.6.4.1";
version = "0.6.6";
};
net-ldap = {
dependencies = [
@@ -3380,10 +3380,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "1lww7i686rm9s50d34hb596y2kfl46dida2kjy8gr64c6jjpn0bd";
sha256 = "0an5r7sxc6011kkalh78vp4w14ff1r6d31fmcsfbywf1pwv1mlfc";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
rails-dom-testing = {
dependencies = [
@@ -3464,10 +3464,10 @@
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "08nyhsigcvjpj9i3r0s73yi8zm16sxmr2x7xgxlaq2jjrghb0gli";
sha256 = "11s4n3zqd7bry5ndraq02f641hskhmnfcza8lkzcw04sawra5213";
type = "gem";
};
version = "8.1.3";
version = "8.1.3.1";
};
rainbow = {
groups = [
+8 -1
View File
@@ -2,6 +2,7 @@
{
fetchFromGitHub,
applyPatches,
fetchpatch,
patches ? [ ],
}:
let
@@ -19,5 +20,11 @@ applyPatches {
yarnMissingHashes = ./missing-hashes.json;
};
};
patches = patches ++ [ ];
patches = patches ++ [
(fetchpatch {
name = "CVE-2026-66066.patch";
url = "https://github.com/mastodon/mastodon/commit/0aede8f7d799aff721a2b3e454163dfae25538b7.patch";
hash = "sha256-NSplnP+c8ZnTmmarZ/cplk5TZvxooKXfLnMDHcBSYY4=";
})
];
}