nextcloud19: 19.0.6 -> 19.0.13

This basically has two reasons:

* I forgot to remove v19 here and I don't want to break this now. Going
  up to the most recent patch-level is the least we can do.
* With a changed version, the `permittedInsecurePackages`-setting in
  people's deployments has to change, so people will actually notice the
  EOL of v19.
This commit is contained in:
Maximilian Bosch 2021-07-12 23:14:59 +02:00
parent edfe11b535
commit b58ae55e22
No known key found for this signature in database
GPG Key ID: 091DBF4D1FC46B8E

View File

@ -46,8 +46,8 @@ in {
'';
nextcloud19 = generic {
version = "19.0.6";
sha256 = "sha256-pqqIayE0OyTailtd2zeYi+G1APjv/YHqyO8jCpq7KJg=";
version = "19.0.13";
sha256 = "sha256-pc5sS7cK65c5vwG7NhKaWU2DeXHovSHH0wEmeosxIg8=";
extraVulnerabilities = [
"Nextcloud 19 is still supported, but CVE-2020-8259 & CVE-2020-8152 are unfixed! Please note that both CVEs only affect the file encryption module which is turned off by default. Alternatively, `pkgs.nextcloud20` can be used."
"Nextcloud 19 is EOL!"