onionshare: mark as vulnerable to CVE-2021-41867, CVE-2021-41868

bumping to a fixed version would require bumping tor, and patching doesn't appear simple.
2021-10-06 18:32:43 +01:00
parent 9590b4283d
commit 751c22c7f5
1 changed files with 2 additions and 0 deletions
--- a/pkgs/applications/networking/onionshare/default.nix
+++ b/pkgs/applications/networking/onionshare/default.nix
@@ -52,6 +52,8 @@ let

    license = licenses.gpl3Plus;
    maintainers = with maintainers; [ lourkeur ];
+
+    knownVulnerabilities = [ "CVE-2021-41867" "CVE-2021-41868" ];
  };

 in rec {