summary refs log tree commit diff
diff options
context:
space:
mode:
authorThomas Gerbet <thomas@gerbet.me>2023-06-12 18:49:35 +0200
committerThomas Gerbet <thomas@gerbet.me>2023-06-12 18:49:35 +0200
commit0b80a5bf008ef23744cd4181c3e6119e1fd48e64 (patch)
tree5f744d0a74df166cd8336dae2639b332abf011f9
parent3463e24e1d1df4d9f47c6e74e62864f915010db2 (diff)
downloadnixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar.gz
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar.bz2
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar.lz
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar.xz
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.tar.zst
nixpkgs-0b80a5bf008ef23744cd4181c3e6119e1fd48e64.zip
limesurvey: 5.6.9+230306 -> 6.1.2+230606, unmark broken
Changelog: https://github.com/LimeSurvey/LimeSurvey/blob/6.1.2%2B230606/docs/release_notes.txt

This upgrade contains security fixes:
* XSS issue in notification email address
* Issue in CSV user export
* Removed vulnerable example files
* Administrator can change his own password without entering the existing one
* Unsafe way to detect IP address against brute-force attacks
-rw-r--r--pkgs/servers/limesurvey/default.nix5
1 files changed, 2 insertions, 3 deletions
diff --git a/pkgs/servers/limesurvey/default.nix b/pkgs/servers/limesurvey/default.nix
index b9eb173bb7d..40488aff18a 100644
--- a/pkgs/servers/limesurvey/default.nix
+++ b/pkgs/servers/limesurvey/default.nix
@@ -2,13 +2,13 @@
 
 stdenv.mkDerivation rec {
   pname = "limesurvey";
-  version = "5.6.9+230306";
+  version = "6.1.2+230606";
 
   src = fetchFromGitHub {
     owner = "LimeSurvey";
     repo = "LimeSurvey";
     rev = version;
-    hash = "sha256-FBcpP9Zb4flr1AZlocRW8xx9UCXJAU9aaGXcWQE6iWc=";
+    hash = "sha256-a89Kdr9XV1TSCoWxYrU0j8ec7rAcIlU/bgLtRjdzqbg=";
   };
 
   phpConfig = writeText "config.php" ''
@@ -37,6 +37,5 @@ stdenv.mkDerivation rec {
     homepage = "https://www.limesurvey.org";
     maintainers = with maintainers; [offline];
     platforms = with platforms; unix;
-    broken = true; # Not compatible with PHP 8.1
   };
 }