From dad40c7ba27f87cee93ab98c047d9b2ba570a1fe Mon Sep 17 00:00:00 2001
From: teutat3s <10206665+teutat3s@users.noreply.github.com>
Date: Tue, 11 Nov 2025 12:27:33 +0100
Subject: [PATCH] element-web-unwrapped: override jitsi-meet known
 vulnerabilities

https://github.com/NixOS/nixpkgs/pull/335753
https://github.com/NixOS/nixpkgs/pull/334638
---
 pkgs/by-name/el/element-web-unwrapped/package.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/el/element-web-unwrapped/package.nix b/pkgs/by-name/el/element-web-unwrapped/package.nix
index 577dcd831cc4..b747fafd8d91 100644
--- a/pkgs/by-name/el/element-web-unwrapped/package.nix
+++ b/pkgs/by-name/el/element-web-unwrapped/package.nix
@@ -15,6 +15,12 @@ let
   noPhoningHome = {
     disable_guests = true; # disable automatic guest account registration at matrix.org
   };
+  # Do not inherit jitsi-meet's knownVulnerabilities (libolm).
+  # https://github.com/NixOS/nixpkgs/pull/335753
+  # https://github.com/NixOS/nixpkgs/pull/334638
+  jitsi-meet-override = jitsi-meet.overrideAttrs (previousAttrs: {
+    meta = removeAttrs previousAttrs.meta [ "knownVulnerabilities" ];
+  });
 in
 stdenv.mkDerivation (
   finalAttrs:
@@ -55,7 +61,7 @@ stdenv.mkDerivation (
       runHook preInstall
 
       cp -R webapp $out
-      cp ${jitsi-meet}/libs/external_api.min.js $out/jitsi_external_api.min.js
+      cp ${jitsi-meet-override}/libs/external_api.min.js $out/jitsi_external_api.min.js
       echo "${finalAttrs.version}" > "$out/version"
       jq -s '.[0] * $conf' "config.sample.json" --argjson "conf" '${builtins.toJSON noPhoningHome}' > "$out/config.json"