From 3fbb4e9c42602fb3aeb08d4a8b2edd6d5dc9187a Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Sun, 4 Aug 2024 17:10:14 +0200 Subject: [PATCH] roundcube: 1.6.7 -> 1.6.8, fix CVE-2024-42009 & CVE-2024-42008 & CVE-2024-42010 ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.6.8 --- pkgs/servers/roundcube/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix index a092473a6a77..6ec9c8c378f2 100644 --- a/pkgs/servers/roundcube/default.nix +++ b/pkgs/servers/roundcube/default.nix @@ -2,11 +2,11 @@ stdenv.mkDerivation rec { pname = "roundcube"; - version = "1.6.7"; + version = "1.6.8"; src = fetchurl { url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz"; - sha256 = "sha256-z1JRXmWygYywL9eiAsdmNnuMVNi3/qJ92pyBqnzh06Y="; + sha256 = "sha256-hGi+AgSnNMV0re9L4BV4x9xPq5wv40ADvzQaK9IO/So="; }; patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];