From b58ae55e223abb4c70666956bcfc49b39ff8bf1c Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Mon, 12 Jul 2021 23:14:59 +0200 Subject: [PATCH] nextcloud19: 19.0.6 -> 19.0.13 This basically has two reasons: * I forgot to remove v19 here and I don't want to break this now. Going up to the most recent patch-level is the least we can do. * With a changed version, the `permittedInsecurePackages`-setting in people's deployments has to change, so people will actually notice the EOL of v19. --- pkgs/servers/nextcloud/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix index e1288502b72..c1789a39749 100644 --- a/pkgs/servers/nextcloud/default.nix +++ b/pkgs/servers/nextcloud/default.nix @@ -46,8 +46,8 @@ in { ''; nextcloud19 = generic { - version = "19.0.6"; - sha256 = "sha256-pqqIayE0OyTailtd2zeYi+G1APjv/YHqyO8jCpq7KJg="; + version = "19.0.13"; + sha256 = "sha256-pc5sS7cK65c5vwG7NhKaWU2DeXHovSHH0wEmeosxIg8="; extraVulnerabilities = [ "Nextcloud 19 is still supported, but CVE-2020-8259 & CVE-2020-8152 are unfixed! Please note that both CVEs only affect the file encryption module which is turned off by default. Alternatively, `pkgs.nextcloud20` can be used." "Nextcloud 19 is EOL!"