Merge pull request #332266 from Ma27/bump-roundcube

roundcube: 1.6.7 -> 1.6.8, fix CVE-2024-42009 & CVE-2024-42008 & CVE-2024-42010
This commit is contained in:
Maximilian Bosch 2024-08-06 07:50:57 +00:00 committed by GitHub
commit 1e0346dcea
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -2,11 +2,11 @@
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
pname = "roundcube"; pname = "roundcube";
version = "1.6.7"; version = "1.6.8";
src = fetchurl { src = fetchurl {
url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz"; url = "https://github.com/roundcube/roundcubemail/releases/download/${version}/roundcubemail-${version}-complete.tar.gz";
sha256 = "sha256-z1JRXmWygYywL9eiAsdmNnuMVNi3/qJ92pyBqnzh06Y="; sha256 = "sha256-hGi+AgSnNMV0re9L4BV4x9xPq5wv40ADvzQaK9IO/So=";
}; };
patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ]; patches = [ ./0001-Don-t-resolve-symlinks-when-trying-to-find-INSTALL_P.patch ];