misskey: apply patch for CVE-2025-24896

Upgrade does not appear to be straightforward. https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm
2025-03-10 22:39:59 +01:00
parent 98b8c3e5d3
commit 901f7eecd6
1 changed files with 10 additions and 0 deletions
@@ -3,6 +3,7 @@
  lib,
  nixosTests,
  fetchFromGitHub,
+  fetchpatch,
  nodejs,
  pnpm_9,
  makeWrapper,
@@ -28,6 +29,15 @@ stdenv.mkDerivation (finalAttrs: {
    fetchSubmodules = true;
  };

+  patches = [
+    (fetchpatch {
+      # https://github.com/misskey-dev/misskey/security/advisories/GHSA-w98m-j6hq-cwjm
+      name = "CVE-2025-24896.patch";
+      url = "https://github.com/misskey-dev/misskey/commit/ba9f295ef2bf31cc90fa587e20b9a7655b7a1824.patch";
+      hash = "sha256-jNl2AdLaG3v8QB5g/UPTupdyP1yGR0WcWull7EA7ogs=";
+    })
+  ];
+
  nativeBuildInputs = [
    nodejs
    pnpm_9.configHook