Skip to content

Commit

Permalink
roundcube: 1.4.10 -> 1.4.11
Browse files Browse the repository at this point in the history
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.4.11

Most notably is the fix of a XSS vulnerability which allowed an attacker
to inject malicious code via CSS's `content'-property from an email[1].

[1] roundcube/roundcubemail@9dc276d
  • Loading branch information
Ma27 committed Feb 8, 2021
1 parent d9d1f56 commit 27d21f8
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions pkgs/servers/roundcube/default.nix
Expand Up @@ -2,11 +2,11 @@

stdenv.mkDerivation rec {
pname = "roundcube";
version = "1.4.10";
version = "1.4.11";

src = fetchurl {
url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
sha256 = "03sjvmnrspkiq0w73xvp1w61pcxhv0djrdm3mvs8h0dp9pfc1n53";
sha256 = "sha256-rHMZBwwwX8LIjHcjYFVi2GBwMHMr7ukxzbQJHPBeabc=";
};

patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];
Expand Down

0 comments on commit 27d21f8

Please sign in to comment.