summary refs log tree commit diff
diff options
context:
space:
mode:
authorajs124 <git@ajs124.de>2022-07-06 16:28:45 +0200
committerajs124 <git@ajs124.de>2022-07-06 16:28:51 +0200
commit6870d49feace5011d1ada61ce6600a141dca35fd (patch)
tree0bbd5d6d21e90d7136cee2e7adc3aaa614833f97
parentda4602bf6bc710817ba4a8a1465a4ed6c79805b6 (diff)
downloadnixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar.gz
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar.bz2
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar.lz
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar.xz
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.tar.zst
nixpkgs-6870d49feace5011d1ada61ce6600a141dca35fd.zip
dovecot: fix CVE-2022-30550
-rw-r--r--pkgs/servers/mail/dovecot/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/servers/mail/dovecot/default.nix b/pkgs/servers/mail/dovecot/default.nix
index 834844f9674..81d858d41b4 100644
--- a/pkgs/servers/mail/dovecot/default.nix
+++ b/pkgs/servers/mail/dovecot/default.nix
@@ -2,6 +2,7 @@
 , bzip2, zlib, lz4, inotify-tools, pam, libcap, coreutils
 , clucene_core_2, icu, openldap, libsodium, libstemmer, cyrus_sasl
 , nixosTests
+, fetchpatch
 # Auth modules
 , withMySQL ? false, libmysqlclient
 , withPgSQL ? false, postgresql
@@ -57,6 +58,11 @@ stdenv.mkDerivation rec {
     # so we can symlink plugins from several packages there.
     # The symlinking needs to be done in NixOS.
     ./2.3.x-module_dir.patch
+    # fix CVE-2022-30550
+    (fetchpatch {
+      url = "https://github.com/dovecot/core/compare/7bad6a24%5E..a1022072.patch";
+      hash = "sha256-aSyRcQreyA9j8QwkODHqPpRuS3vzouVatEWCqhh+r+8=";
+    })
   ];
 
   configureFlags = [