From 169253be5352cb29468cc0d389849aa1ca9ad0b6 Mon Sep 17 00:00:00 2001 From: Florian Klink Date: Mon, 22 Feb 2021 19:32:08 +0100 Subject: [PATCH] isync: 1.4.0 -> 1.4.1 Fixes CVE-2021-20247: isync/mbsync data leak/destruction vulnerability https://sourceforge.net/p/isync/mailman/message/37225234/ --- pkgs/tools/networking/isync/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/tools/networking/isync/default.nix b/pkgs/tools/networking/isync/default.nix index 59315c4bf4b3..f6263f187bf5 100644 --- a/pkgs/tools/networking/isync/default.nix +++ b/pkgs/tools/networking/isync/default.nix @@ -5,11 +5,11 @@ stdenv.mkDerivation rec { pname = "isync"; - version = "1.4.0"; + version = "1.4.1"; src = fetchurl { url = "mirror://sourceforge/isync/${pname}-${version}.tar.gz"; - sha256 = "0pkqvsdmi85xrhzzc7mz87vdvvvp01lf8akhfdnmsdlks8zbzy44"; + sha256 = "0l01880fcyqn6xq9n8236ha5n2a3wl5g8rmv22z8nv5hgfsxndhd"; }; nativeBuildInputs = [ pkg-config perl ];