From 69cc728e2bea3095fa07d0745afdfa4715eb7ac0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= Date: Thu, 28 Mar 2019 15:18:23 +0100 Subject: [PATCH] dovecot: add patch for CVE-2019-7524 This applies commits https://github.com/dovecot/core/commit/578cf77e84b3d25e2f95f08133a2b0b212aa77cc https://github.com/dovecot/core/commit/696320b0f3644e928a9d0c71c063f603c3792dbb --- pkgs/servers/mail/dovecot/default.nix | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/pkgs/servers/mail/dovecot/default.nix b/pkgs/servers/mail/dovecot/default.nix index f35b8ebbdcbf..8e3a3b6103f7 100644 --- a/pkgs/servers/mail/dovecot/default.nix +++ b/pkgs/servers/mail/dovecot/default.nix @@ -1,4 +1,4 @@ -{ stdenv, lib, fetchurl, perl, pkgconfig, systemd, openssl +{ stdenv, lib, fetchurl, fetchpatch, perl, pkgconfig, systemd, openssl , bzip2, zlib, lz4, inotify-tools, pam, libcap , clucene_core_2, icu, openldap, libsodium, libstemmer # Auth modules @@ -47,6 +47,12 @@ stdenv.mkDerivation rec { # so we can symlink plugins from several packages there. # The symlinking needs to be done in NixOS. ./2.2.x-module_dir.patch + + (fetchpatch { + name = "CVE-2019-7524.patch"; + url = https://github.com/dovecot/core/compare/578cf77e84b3d25e2f95f08133a2b0b212aa77cc~1..696320b0f3644e928a9d0c71c063f603c3792dbb.patch; + sha256 = "101d757gid0dn3mxqqpa59igkgkq7bwffsklh3nimaav0v2zb018"; + }) ]; configureFlags = [