tjh.dev
+11
-1
pkgs/servers/mail/exim/default.nix
+11
-1
pkgs/servers/mail/exim/default.nix
···
1
-
{ coreutils, db, fetchurl, openssl, pcre, perl, pkgconfig, stdenv
1
+
{ coreutils, db, fetchurl, openssl, pcre, perl, pkgconfig, stdenv, fetchpatch
2
2
, enableLDAP ? false, openldap
3
3
, enableMySQL ? false, mysql, zlib
4
4
, enableAuthDovecot ? false, dovecot
···
12
12
url = "https://ftp.exim.org/pub/exim/exim4/${name}.tar.xz";
13
13
sha256 = "066ip7a5lqfn9rcr14j4nm0kqysw6mzvbbb0ip50lmfm0fqsqmzc";
14
14
};
15
+
16
+
patches = [
17
+
(fetchpatch {
18
+
name = "CVE-2019-10149.patch";
19
+
url = https://git.exim.org/exim.git/patch/d740d2111f189760593a303124ff6b9b1f83453d;
20
+
stripLen = 1;
21
+
includes = ["src/deliver.c"];
22
+
sha256 = "0va872q2d3nizr001hfs1yaa4w5lffppk4hkim2ywcpq8ap5kxfk";
23
+
})
24
+
];
15
25
16
26
nativeBuildInputs = [ pkgconfig ];
17
27
buildInputs = [ coreutils db openssl perl pcre ]