From 27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46 Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Mon, 8 Feb 2021 21:39:45 +0100 Subject: [PATCH] roundcube: 1.4.10 -> 1.4.11 ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.4.11 Most notably is the fix of a XSS vulnerability which allowed an attacker to inject malicious code via CSS's `content'-property from an email[1]. [1] https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596 --- pkgs/servers/roundcube/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix index ce62b7d1fdc..75afedaa2dd 100644 --- a/pkgs/servers/roundcube/default.nix +++ b/pkgs/servers/roundcube/default.nix @@ -2,11 +2,11 @@ stdenv.mkDerivation rec { pname = "roundcube"; - version = "1.4.10"; + version = "1.4.11"; src = fetchurl { url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz"; - sha256 = "03sjvmnrspkiq0w73xvp1w61pcxhv0djrdm3mvs8h0dp9pfc1n53"; + sha256 = "sha256-rHMZBwwwX8LIjHcjYFVi2GBwMHMr7ukxzbQJHPBeabc="; }; patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];