about summary refs log tree commit diff
path: root/pkgs/servers/atlassian/confluence.nix
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2023-08-15 22:22:06 +0200
committerMaximilian Bosch <maximilian@mbosch.me>2023-08-15 23:06:55 +0200
commit4b2e3bd079709ab802b360ef5b182416020bbab7 (patch)
tree2d3bc8288f32e2fed22af9fd55b1a2550bab5bb9 /pkgs/servers/atlassian/confluence.nix
parent4ed9856be002a730234a1a1ed9dcd9dd10cbdb40 (diff)
atlassian-confluence: 7.19.5 -> 7.19.12
Upgrade to the latest patchlevel of the 7.19 LTS release. Most notably
it contains fixes for the following security bulletins from Atlassian:

* https://confluence.atlassian.com/security/security-bulletin-august-15-2023-1276870882.html
  (upgrade of bundled Apache Tomcat to fix CVE-2023-24998).

* https://confluence.atlassian.com/security/security-bulletin-july-18-2023-1251417643.html
  (fixes CVE-2023-22508, an RCE in Confluence >=6.1 <8.2)

Additionally, each release contains several additional bugfixes and
security fixes:

* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-12-1272383421.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-11-1255451908.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-10-1252328199.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-9-1236440851.html
  (also fixes CVE-2023-22504 which allows users with read-only access to
  a page to upload attachments)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-8-1229036579.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-7-1224638578.html
  (also fixes CVE-2023-22503 an information disclosure of label &
  attachment names)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-6-1207191110.html
Diffstat (limited to 'pkgs/servers/atlassian/confluence.nix')
-rw-r--r--pkgs/servers/atlassian/confluence.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/pkgs/servers/atlassian/confluence.nix b/pkgs/servers/atlassian/confluence.nix
index 5bfb2881c4cc8..2225ca02b26b4 100644
--- a/pkgs/servers/atlassian/confluence.nix
+++ b/pkgs/servers/atlassian/confluence.nix
@@ -15,11 +15,11 @@ in
 optionalWarning (crowdProperties != null) "Using `crowdProperties` is deprecated!"
 (stdenvNoCC.mkDerivation rec {
   pname = "atlassian-confluence";
-  version = "7.19.5";
+  version = "7.19.12";
 
   src = fetchurl {
     url = "https://product-downloads.atlassian.com/software/confluence/downloads/${pname}-${version}.tar.gz";
-    sha256 = "sha256-32syhzbFCWzwE2NftTY58aA+iD0kABraT4FA7mYU1II=";
+    sha256 = "sha256-59JOZWKhHPtz9NFiGreFHAOgIL5aB227j6nC1XyofvE=";
   };
 
   buildPhase = ''