mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-02-22 03:53:47 +00:00
wallabag: 2.5.2 -> 2.5.3
https://github.com/wallabag/wallabag/releases/tag/2.5.3 Fixes two security issues, were an authorized user could - export other users entries - modify or delete other user's annotations Fixes: CVE-2023-0609, CVE-2023-0610
This commit is contained in:
parent
1efc432d4f
commit
98c6798b10
@ -16,7 +16,7 @@
|
||||
|
||||
let
|
||||
pname = "wallabag";
|
||||
version = "2.5.2";
|
||||
version = "2.5.3";
|
||||
in
|
||||
stdenv.mkDerivation {
|
||||
inherit pname version;
|
||||
@ -27,7 +27,7 @@ stdenv.mkDerivation {
|
||||
"https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz"
|
||||
"https://github.com/wallabag/wallabag/releases/download/${version}/wallabag-${version}.tar.gz"
|
||||
];
|
||||
hash = "sha256-Q989SorGPm3KBuQhGAinYU6HGIa9RrhtRPvwGALU6jk=";
|
||||
hash = "sha256-a30z9rdXcfc2eVuShEobgDWWHr9TfMwq9WwaWdrI3QU=";
|
||||
};
|
||||
|
||||
patches = [
|
||||
@ -45,8 +45,12 @@ stdenv.mkDerivation {
|
||||
dontBuild = true;
|
||||
|
||||
installPhase = ''
|
||||
runHook preInstall
|
||||
|
||||
mkdir $out
|
||||
cp -R * $out/
|
||||
|
||||
runHook postInstall
|
||||
'';
|
||||
|
||||
meta = with lib; {
|
||||
|
Loading…
Reference in New Issue
Block a user