pretix: apply patch for CVE-2024-8113

https://pretix.eu/about/en/blog/20240823-release-2024-7-1/
NixOS · Aug 27, 2024 · 08e5e55 · 08e5e55
1 parent 901b587
commit 08e5e55
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pkgs/by-name/pr/pretix/package.nix b/pkgs/by-name/pr/pretix/package.nix
@@ -2,6 +2,7 @@
 , buildNpmPackage
 , fetchFromGitHub
 , fetchPypi
+, fetchpatch2
 , nodejs
 , python3
 , gettext
@@ -65,6 +66,12 @@ python.pkgs.buildPythonApplication rec {
     # Discover pretix.plugin entrypoints during build and add them into
     # INSTALLED_APPS, so that their static files are collected.
     ./plugin-build.patch
+
+    (fetchpatch2 {
+      name = "CVE-2024-8113.patch";
+      url = "https://github.com/pretix/pretix/commit/0f44a2ad4e170882dbe6b9d95dba6c36e4e181cf.patch";
+      hash = "sha256-N5Fvf7tfZvtqDy7fO7sPBhtew8uGFLzK+kVO/hMgEIY=";
+    })
   ];
 
   postPatch = ''