public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #23674 from c0bw3b/sec/jboss7

Browse Source 
JBoss AS: list known vulnerability
This commit is contained in:
Graham Christensen
2017-03-15 17:33:27 -04:00
committed by GitHub
parent eba3900781 72619a86c9
commit e4c0613470
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/web-servers/jboss/default.nix
View File

@@ -25,7 +25,7 @@ in
enable = mkOption {
default = false;
description = "Whether to enable jboss";
description = "Whether to enable JBoss. WARNING : this package is outdated and is known to have vulnerabilities.";
};
tempDir = mkOption {

3
pkgs/servers/http/jboss/default.nix
View File

@@ -22,5 +22,8 @@ stdenv.mkDerivation {
license = licenses.lgpl21;
maintainers = [ maintainers.sander ];
platforms = platforms.unix;
knownVulnerabilities = [
"CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
];
};
}