ilyakooo0/nixpkgs
1
0
Fork 0
mirror of https://github.com/ilyakooo0/nixpkgs.git synced 2024-12-25 20:34:52 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #23674 from c0bw3b/sec/jboss7

Browse Source 
JBoss AS: list known vulnerability
This commit is contained in:
Graham Christensen 2017-03-15 17:33:27 -04:00 committed by GitHub
commit e4c0613470
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/services/web-servers/jboss/default.nix
View File

@ -25,7 +25,7 @@ in
enable = mkOption {
default = false;
description = "Whether to enable jboss";
description = "Whether to enable JBoss. WARNING : this package is outdated and is known to have vulnerabilities.";
};
tempDir = mkOption {

3
pkgs/servers/http/jboss/default.nix
View File

@ -22,5 +22,8 @@ stdenv.mkDerivation {
license = licenses.lgpl21;
maintainers = [ maintainers.sander ];
platforms = platforms.unix;
knownVulnerabilities = [
"CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
];
};
}