tightvnc: mark as insecure (fixes #150704)
commit034d277c6e32133163d2fd5d7ead0b4b70f478a2
authorIngo Blechschmidt <iblech@web.de>
dateFri 17 Dec 2021, 21:32 (5 years ago)
parent64bbe28
pkgs/tools/admin/tightvnc/default.nix+4
@@ -82,5 +82,9 @@ stdenv.mkDerivation rec {
8282
8383 maintainers = [];
8484 platforms = lib.platforms.unix;
85+
86+ knownVulnerabilities = [ "CVE-2021-42785" ];
87+ # Unfortunately, upstream doesn't maintain the 1.3 branch anymore, and the
88+ # new 2.x branch is substantially different (requiring either Windows or Java)
8589 };
8690}