From d45446b41047eb591bac9f09a11343c9081105a3 Mon Sep 17 00:00:00 2001 From: Chandler Swift Date: Sat, 22 Feb 2025 19:29:42 -0600 Subject: [PATCH] Upgrade navidrome to remediate auth bypass bug Ref: https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p --- bert/services/navidrome.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/bert/services/navidrome.nix b/bert/services/navidrome.nix index 7197ac5..66945df 100644 --- a/bert/services/navidrome.nix +++ b/bert/services/navidrome.nix @@ -1,6 +1,7 @@ { services.navidrome = { enable = true; + package = (import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/33ab0a55ad0e3fe2b40339bdc3c46e3387a8a777.tar.gz") {}).navidrome; settings = { MusicFolder = "/mnt/bigbird_public/media/music"; ScanSchedule = "@every 12h";