pyrox.dev
dovecot: 2.3.0 -> 2.3.0.1
Release notes: https://dovecot.org/list/dovecot-news/2018-February/000371.html
CVE-2017-15132 is patched in this release, so the patches were removed.
They were erroneously referencing CVE-2017-14132, but were indeed patches for CVE-2017-15132.
+2
-12
pkgs/servers/mail/dovecot/default.nix
+2
-12
pkgs/servers/mail/dovecot/default.nix
···
8
8
}:
9
9
10
10
stdenv.mkDerivation rec {
11
-
name = "dovecot-2.3.0";
11
+
name = "dovecot-2.3.0.1";
12
12
13
13
nativeBuildInputs = [ perl pkgconfig ];
14
14
buildInputs =
···
20
20
21
21
src = fetchurl {
22
22
url = "http://dovecot.org/releases/2.3/${name}.tar.gz";
23
-
sha256 = "10c5myzgys866c3x6jdr1s9x9pqnjd5vpyz8z384sph21m3wnq6y";
23
+
sha256 = "0lzisrdgrj5qqwjb7bv99mf2aljm568r6g108yisp0s644z2nxxb";
24
24
};
25
25
26
26
preConfigure = ''
···
47
47
# so we can symlink plugins from several packages there.
48
48
# The symlinking needs to be done in NixOS.
49
49
./2.2.x-module_dir.patch
50
-
(fetchpatch {
51
-
name = "CVE-2017-14132_part1.patch";
52
-
url = https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch;
53
-
sha256 = "1pcfzxr8xlwbpa7z19grp7mlvdnan6ln8zw74dj4pdmynmlk4aw9";
54
-
})
55
-
(fetchpatch {
56
-
name = "CVE-2017-14132_part2.patch";
57
-
url = https://github.com/dovecot/core/commit/a9b135760aea6d1790d447d351c56b78889dac22.patch;
58
-
sha256 = "0082iid5rvjmh003xi9s09jld2rb31hbvni0yai1h1ggbmd5zf8l";
59
-
})
60
50
];
61
51
62
52
configureFlags = [