summary refs log tree commit diff
path: root/pkgs/servers/roundcube/default.nix
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2021-02-08 21:39:45 +0100
committerMaximilian Bosch <maximilian@mbosch.me>2021-02-08 21:43:19 +0100
commit27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46 (patch)
treef2f1970d7f174146ddc888d760ff7238968f9566 /pkgs/servers/roundcube/default.nix
parentd9d1f5627efc4131ebcfbf6e833c871a3653d6bf (diff)
downloadnixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar.gz
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar.bz2
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar.lz
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar.xz
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.tar.zst
nixpkgs-27d21f84b6ce698ede5ddcbbd8c3adf4b3087f46.zip
roundcube: 1.4.10 -> 1.4.11
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.4.11

Most notably is the fix of a XSS vulnerability which allowed an attacker
to inject malicious code via CSS's `content'-property from an email[1].

[1] https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596
Diffstat (limited to 'pkgs/servers/roundcube/default.nix')
-rw-r--r--pkgs/servers/roundcube/default.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/pkgs/servers/roundcube/default.nix b/pkgs/servers/roundcube/default.nix
index ce62b7d1fdc..75afedaa2dd 100644
--- a/pkgs/servers/roundcube/default.nix
+++ b/pkgs/servers/roundcube/default.nix
@@ -2,11 +2,11 @@
 
 stdenv.mkDerivation rec {
   pname = "roundcube";
-  version = "1.4.10";
+  version = "1.4.11";
 
   src = fetchurl {
     url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
-    sha256 = "03sjvmnrspkiq0w73xvp1w61pcxhv0djrdm3mvs8h0dp9pfc1n53";
+    sha256 = "sha256-rHMZBwwwX8LIjHcjYFVi2GBwMHMr7ukxzbQJHPBeabc=";
   };
 
   patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];