Merge pull request #33610 from andir/syncthing-insecure

Mark syncthing012 and syncthing013 as insecure. Fixes #33568
This commit is contained in:
Peter Hoeg
2018-01-08 22:29:57 +08:00
committed by GitHub
2 changed files with 9 additions and 0 deletions

View File

@@ -24,4 +24,12 @@ buildGoPackage rec {
preBuild = ''
export buildFlagsArray+=("-tags" "noupgrade release")
'';
meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20;
platforms = with stdenv.lib.platforms; linux ++ freebsd ++ openbsd ++ netbsd;
};
}

View File

@@ -29,6 +29,7 @@ stdenv.mkDerivation rec {
'';
meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20;