public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "nixpkgs: allow packages to be marked insecure"

Browse Source
This commit is contained in:
Graham Christensen
2017-02-23 09:41:42 -05:00
committed by GitHub
parent 274994785d
commit 59d61ef34a
2 changed files with 12 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pkgs/development/libraries/libplist/default.nix
View File

@@ -28,12 +28,5 @@ in stdenv.mkDerivation rec {
homepage = http://github.com/JonathanBeck/libplist;
platforms = stdenv.lib.platforms.all;
maintainers = [ stdenv.lib.maintainers.urkud ];
knownVulnerabilities = [
"CVE-2017-5209: base64decode function in base64.c allows attackers to obtain sensitive information from process memory or cause a denial of service"
"CVE-2017-5545: attackers to obtain sensitive information from process memory or cause a denial of service"
"CVE-2017-5834: A heap-buffer overflow in parse_dict_node"
"CVE-2017-5835: A memory allocation error leading to DoS"
"CVE-2017-5836: A type inconsistency in bplist.c"
];
};
}