From 5d3607b2da4ba7bf72420fe92167800f62d0a3be Mon Sep 17 00:00:00 2001 From: Andreas Rammhold Date: Sun, 15 Dec 2019 20:48:56 +0100 Subject: [PATCH] spamassassin: 3.4.2 -> 3.4.3 Two security issues have been fixed in this release: * CVE-2019-12420 for Multipart Denial of Service Vulnerability * CVE-2018-11805 for nefarious CF files can be configured to run system commands without any output or errors. https://svn.apache.org/repos/asf/spamassassin/branches/3.4/build/announcements/3.4.3.txt --- pkgs/servers/mail/spamassassin/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/mail/spamassassin/default.nix b/pkgs/servers/mail/spamassassin/default.nix index 186f4670153f..c00814923fe0 100644 --- a/pkgs/servers/mail/spamassassin/default.nix +++ b/pkgs/servers/mail/spamassassin/default.nix @@ -2,11 +2,11 @@ perlPackages.buildPerlPackage rec { pname = "SpamAssassin"; - version = "3.4.2"; + version = "3.4.3"; src = fetchurl { url = "mirror://apache/spamassassin/source/Mail-${pname}-${version}.tar.bz2"; - sha256 = "1np8h293bzg33i0xn9gj9krwgr7k6xbyf1yhxr2j2xci95d080yg"; + sha256 = "1380cmrgjsyidnznr844c5yr9snz36dw7xchdfryi2s61vjzvf55"; }; # https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7434