From 87908299fba199912bbb10caf004abfef42f5def Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Thu, 26 Mar 2026 02:33:43 +0100
Subject: [PATCH] frigate: 0.17.0 -> 0.17.1

https://github.com/blakeblackshear/frigate/releases/tag/v0.17.1
https://github.com/blakeblackshear/frigate/security/advisories/GHSA-26g3-f8g8-9ffh
https://github.com/blakeblackshear/frigate/security/advisories/GHSA-m2mg-pj9p-2r7g

Fixes: CVE-2026-33469, CVE-2026-33470
---
 pkgs/by-name/fr/frigate/package.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/fr/frigate/package.nix b/pkgs/by-name/fr/frigate/package.nix
index 7dc8a3620169..8db02d035474 100644
--- a/pkgs/by-name/fr/frigate/package.nix
+++ b/pkgs/by-name/fr/frigate/package.nix
@@ -11,17 +11,18 @@
   sqlite-vec,
   frigate,
   nixosTests,
+  go2rtc,
 }:
 
 let
-  version = "0.17.0";
+  version = "0.17.1";
 
   src = fetchFromGitHub {
     name = "frigate-${version}-source";
     owner = "blakeblackshear";
     repo = "frigate";
     tag = "v${version}";
-    hash = "sha256-K41tWnj0u+Fw+G++aPFfMa0uFYEvvZ0r6xNPQ7J1cYs=";
+    hash = "sha256-jQQ54By77dOVSIu08YhJn+EUV0D03j1bcMQRk9404RE=";
   };
 
   frigate-web = callPackage ./web.nix {
@@ -250,6 +251,11 @@ python3Packages.buildPythonApplication rec {
   disabledTests = [
     # Test needs network access
     "test_plus_labelmap"
+    # Expects go2rtc on :1984
+    "test_admin_can_access_any_stream"
+    "test_restricted_role_can_access_allowed_camera"
+    "test_stream_alias_allowed_for_owning_camera"
+    "test_unconfigured_role_can_access_any_stream"
   ];
 
   passthru = {