Merge pull request #111215 from dotlambda/libgcrypt_1_5-insecure

libgcrypt_1_5: mark as insecure
2021-01-30 02:45:39 +01:00
parent 45a7914186 7ca0cefc3f
commit ffc9c0378f
1 changed files with 11 additions and 0 deletions
--- a/pkgs/development/libraries/libgcrypt/1.5.nix
+++ b/pkgs/development/libraries/libgcrypt/1.5.nix
@@ -38,5 +38,16 @@ stdenv.mkDerivation rec {
    license = licenses.lgpl2Plus;
    platforms = platforms.all;
    repositories.git = "git://git.gnupg.org/libgcrypt.git";
+    knownVulnerabilities = [
+      "CVE-2014-3591"
+      "CVE-2015-0837"
+      "CVE-2015-7511"
+      "CVE-2017-0379"
+      "CVE-2017-7526"
+      "CVE-2017-9526"
+      "CVE-2018-0495"
+      "CVE-2018-6829"
+      "CVE-2018-12437"
+    ];
  };
 }