mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-07-22 00:20:58 +00:00
roundcube: 1.4.11 -> 1.4.12
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.4.12
This fixes a XSS[1] and a SQL-injection[2] vulnerability. Both are
already fixed on 1.5.0 which is available on `nixos-unstable`[3].
[1] https://github.com/roundcube/roundcubemail/pull/8193
[2] 4e1358b4dc
[3] https://nixpk.gs/pr-tracker.html?pr=142148
This commit is contained in:
@@ -2,11 +2,11 @@
|
||||
|
||||
stdenv.mkDerivation rec {
|
||||
pname = "roundcube";
|
||||
version = "1.4.11";
|
||||
version = "1.4.12";
|
||||
|
||||
src = fetchurl {
|
||||
url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
|
||||
sha256 = "sha256-rHMZBwwwX8LIjHcjYFVi2GBwMHMr7ukxzbQJHPBeabc=";
|
||||
sha256 = "sha256-FbBBGuyVd1BnKeT+KpEGvffFHw3c3qeZRaSWh5Wr0ro=";
|
||||
};
|
||||
|
||||
patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];
|
||||
|
||||
Reference in New Issue
Block a user