wallabag: 2.5.2 -> 2.5.3

https://github.com/wallabag/wallabag/releases/tag/2.5.3

Fixes two security issues, were an authorized user could
- export other users entries
- modify or delete other user's annotations

Fixes: CVE-2023-0609, CVE-2023-0610
This commit is contained in:
Martin Weinelt 2023-02-01 14:05:42 +01:00
parent 1efc432d4f
commit 98c6798b10
No known key found for this signature in database
GPG Key ID: 87C1E9888F856759

View File

@ -16,7 +16,7 @@
let
pname = "wallabag";
version = "2.5.2";
version = "2.5.3";
in
stdenv.mkDerivation {
inherit pname version;
@ -27,7 +27,7 @@ stdenv.mkDerivation {
"https://static.wallabag.org/releases/wallabag-release-${version}.tar.gz"
"https://github.com/wallabag/wallabag/releases/download/${version}/wallabag-${version}.tar.gz"
];
hash = "sha256-Q989SorGPm3KBuQhGAinYU6HGIa9RrhtRPvwGALU6jk=";
hash = "sha256-a30z9rdXcfc2eVuShEobgDWWHr9TfMwq9WwaWdrI3QU=";
};
patches = [
@ -45,8 +45,12 @@ stdenv.mkDerivation {
dontBuild = true;
installPhase = ''
runHook preInstall
mkdir $out
cp -R * $out/
runHook postInstall
'';
meta = with lib; {