Merge pull request #257132 from risicle/ris-zola-CVE-2023-40274

zola: add patch for CVE-2023-40274
This commit is contained in:
Vlad M 2023-09-26 16:41:03 +03:00 committed by GitHub
commit 0457bb6b38
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,7 @@
{ lib
, stdenv
, fetchFromGitHub
, fetchpatch
, rustPlatform
, cmake
, pkg-config
@ -26,6 +27,14 @@ rustPlatform.buildRustPackage rec {
cargoHash = "sha256-AAub8UwAvX3zNX+SM/T9biyNxFTgfqUQG/MUGfwWuno=";
patches = [
(fetchpatch {
name = "CVE-2023-40274.patch";
url = "https://github.com/getzola/zola/commit/fe1967fb0fe063b1cee1ad48820870ab2ecc0e5b.patch";
hash = "sha256-B/SVGhVX5hAbvMhBYO+mU5+xdZXU2JyS4uKmOj+aZuI=";
})
];
nativeBuildInputs = [
cmake
pkg-config