From 7dd0bf05e730973bac17697ef17abd7c686a4a06 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sun, 28 Apr 2024 13:51:52 +0100 Subject: [PATCH] spicedb: add patch for CVE-2024-32001 --- pkgs/servers/spicedb/default.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkgs/servers/spicedb/default.nix b/pkgs/servers/spicedb/default.nix index 3ad129be17d63d8..cc595eca2f742f9 100644 --- a/pkgs/servers/spicedb/default.nix +++ b/pkgs/servers/spicedb/default.nix @@ -27,6 +27,11 @@ buildGoModule rec { url = "https://github.com/authzed/spicedb/commit/ef443c442b96909694390324a99849b0407007fe.patch"; hash = "sha256-8xXM0EBxJ0hI7RtURFxmRpYqGdSGZ/jZVP4KAuh2E/U="; }) + (fetchpatch { + name = "CVE-2024-32001.patch"; + url = "https://github.com/authzed/spicedb/commit/a244ed1edfaf2382711dccdb699971ec97190c7b.patch"; + hash = "sha256-tdSqo7tFXs/ea5dIKV9Aikva9Za0Hj1Ng4LeCAQX9DA="; + }) ]; vendorHash = "sha256-r0crxfE3XtsT4+5lWNY6R/bcuxq2WeongK9l7ABXQo8=";