Merge pull request #34483 from andir/dovecot-cve-2017-15132

dovecot: fix CVE-2017-15132

authored by Andreas Rammhold and committed by GitHub f92fd955 ce085810

+11 -36
+11 -1
pkgs/servers/mail/dovecot/default.nix
··· 1 - { stdenv, lib, fetchurl, perl, pkgconfig, systemd, openssl 2 , bzip2, zlib, lz4, inotify-tools, pam, libcap 3 , clucene_core_2, icu, openldap, libsodium, libstemmer 4 # Auth modules ··· 47 # so we can symlink plugins from several packages there. 48 # The symlinking needs to be done in NixOS. 49 ./2.2.x-module_dir.patch 50 ]; 51 52 configureFlags = [
··· 1 + { stdenv, lib, fetchurl, fetchpatch, perl, pkgconfig, systemd, openssl 2 , bzip2, zlib, lz4, inotify-tools, pam, libcap 3 , clucene_core_2, icu, openldap, libsodium, libstemmer 4 # Auth modules ··· 47 # so we can symlink plugins from several packages there. 48 # The symlinking needs to be done in NixOS. 49 ./2.2.x-module_dir.patch 50 + (fetchpatch { 51 + name = "CVE-2017-14132_part1.patch"; 52 + url = https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch; 53 + sha256 = "1pcfzxr8xlwbpa7z19grp7mlvdnan6ln8zw74dj4pdmynmlk4aw9"; 54 + }) 55 + (fetchpatch { 56 + name = "CVE-2017-14132_part2.patch"; 57 + url = https://github.com/dovecot/core/commit/a9b135760aea6d1790d447d351c56b78889dac22.patch; 58 + sha256 = "0082iid5rvjmh003xi9s09jld2rb31hbvni0yai1h1ggbmd5zf8l"; 59 + }) 60 ]; 61 62 configureFlags = [
-34
pkgs/servers/mail/dovecot/plugins/antispam/default.nix
··· 1 - { stdenv, fetchhg, autoconf, automake, dovecot, openssl }: 2 - 3 - stdenv.mkDerivation { 4 - name = "dovecot-antispam-20130429"; 5 - 6 - src = fetchhg { 7 - url = "http://hg.dovecot.org/dovecot-antispam-plugin/"; 8 - rev = "5ebc6aae4d7c"; 9 - sha256 = "181i79c9sf3a80mgmycfq1f77z7fpn3j2s0qiddrj16h3yklf4gv"; 10 - }; 11 - 12 - buildInputs = [ dovecot openssl ]; 13 - nativeBuildInputs = [ autoconf automake ]; 14 - 15 - preConfigure = '' 16 - ./autogen.sh 17 - # Ugly hack; any ideas? 18 - sed "s,^dovecot_moduledir=.*,dovecot_moduledir=$out/lib/dovecot," ${dovecot}/lib/dovecot/dovecot-config > dovecot-config 19 - ''; 20 - 21 - configureFlags = [ 22 - "--with-dovecot=." 23 - ]; 24 - 25 - enableParallelBuilding = true; 26 - 27 - meta = with stdenv.lib; { 28 - homepage = http://wiki2.dovecot.org/Plugins/Antispam; 29 - description = "An antispam plugin for the Dovecot IMAP server"; 30 - license = licenses.gpl2; 31 - maintainers = with maintainers; [ abbradar ]; 32 - platforms = platforms.linux; 33 - }; 34 - }
···
-1
pkgs/top-level/all-packages.nix
··· 11901 11902 dovecot = callPackage ../servers/mail/dovecot { }; 11903 dovecot_pigeonhole = callPackage ../servers/mail/dovecot/plugins/pigeonhole { }; 11904 - dovecot_antispam = callPackage ../servers/mail/dovecot/plugins/antispam { }; 11905 11906 dspam = callPackage ../servers/mail/dspam { 11907 inherit (perlPackages) NetSMTP;
··· 11901 11902 dovecot = callPackage ../servers/mail/dovecot { }; 11903 dovecot_pigeonhole = callPackage ../servers/mail/dovecot/plugins/pigeonhole { }; 11904 11905 dspam = callPackage ../servers/mail/dspam { 11906 inherit (perlPackages) NetSMTP;