atlassian-confluence: 7.19.5 -> 7.19.12

Upgrade to the latest patchlevel of the 7.19 LTS release. Most notably
it contains fixes for the following security bulletins from Atlassian:

* https://confluence.atlassian.com/security/security-bulletin-august-15-2023-1276870882.html
  (upgrade of bundled Apache Tomcat to fix CVE-2023-24998).

* https://confluence.atlassian.com/security/security-bulletin-july-18-2023-1251417643.html
  (fixes CVE-2023-22508, an RCE in Confluence >=6.1 <8.2)

Additionally, each release contains several additional bugfixes and
security fixes:

* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-12-1272383421.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-11-1255451908.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-10-1252328199.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-9-1236440851.html
  (also fixes CVE-2023-22504 which allows users with read-only access to
  a page to upload attachments)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-8-1229036579.html
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-7-1224638578.html
  (also fixes CVE-2023-22503 an information disclosure of label &
  attachment names)
* https://confluence.atlassian.com/doc/issues-resolved-in-7-19-6-1207191110.html
This commit is contained in:
Maximilian Bosch 2023-08-15 22:22:06 +02:00
parent 4ed9856be0
commit 4b2e3bd079
No known key found for this signature in database
GPG key ID: 9A6EEA275CA5BE0A

View file

@ -15,11 +15,11 @@ in
optionalWarning (crowdProperties != null) "Using `crowdProperties` is deprecated!"
(stdenvNoCC.mkDerivation rec {
pname = "atlassian-confluence";
version = "7.19.5";
version = "7.19.12";
src = fetchurl {
url = "https://product-downloads.atlassian.com/software/confluence/downloads/${pname}-${version}.tar.gz";
sha256 = "sha256-32syhzbFCWzwE2NftTY58aA+iD0kABraT4FA7mYU1II=";
sha256 = "sha256-59JOZWKhHPtz9NFiGreFHAOgIL5aB227j6nC1XyofvE=";
};
buildPhase = ''