diff options
| author | Thomas Gerbet <thomas@gerbet.me> | 2023-06-12 19:17:40 +0200 |
|---|---|---|
| committer | Thomas Gerbet <thomas@gerbet.me> | 2023-06-12 19:17:40 +0200 |
| commit | f400bfd23a9ff21837763d300f9ab289507ae44e (patch) | |
| tree | 3b4d2af47fd3c6d60e031fd295d795e584450389 | |
| parent | Merge pull request #237370 from NixOS/backport-237282-to-release-23.05 (diff) | |
| download | nixpkgs-f400bfd23a9ff21837763d300f9ab289507ae44e.tar.gz | |
limesurvey: 5.6.9+230306 -> 5.6.25+230605
Changelog: https://github.com/LimeSurvey/LimeSurvey/blob/5.6.25%2B230605/docs/release_notes.txt
This upgrade contains security fixes:
* XSS issue in notification email address
* Issue in CSV user export
* Removed vulnerable example files
* Administrator can change his own password without entering the existing one
* Unsafe way to detect IP address against brute-force attacks
| -rw-r--r-- | pkgs/servers/limesurvey/default.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkgs/servers/limesurvey/default.nix b/pkgs/servers/limesurvey/default.nix index ce75e8de8b5a..502a7f52969f 100644 --- a/pkgs/servers/limesurvey/default.nix +++ b/pkgs/servers/limesurvey/default.nix @@ -2,13 +2,13 @@ stdenv.mkDerivation rec { pname = "limesurvey"; - version = "5.6.9+230306"; + version = "5.6.25+230605"; src = fetchFromGitHub { owner = "LimeSurvey"; repo = "LimeSurvey"; rev = version; - hash = "sha256-FBcpP9Zb4flr1AZlocRW8xx9UCXJAU9aaGXcWQE6iWc="; + hash = "sha256-xJG734R4vMwF6jz6sERpbyoEvYtoir56EM0MrtMK+uI="; }; phpConfig = writeText "config.php" '' |