Merge pull request #151124 from iblech/patch-tightvnc-cve
tightvnc: mark as insecure (fixes #150704)
commit7cb82ec6149236f3655bd0fb269c41b55e4892fc
authorRobert Scott <code@humanleg.org.uk>
dateFri 17 Dec 2021, 21:56 (5 years ago)
parent7de40c4034d277
pkgs/tools/admin/tightvnc/default.nix+4
@@ -82,5 +82,9 @@ stdenv.mkDerivation rec {
8282
8383 maintainers = [];
8484 platforms = lib.platforms.unix;
85+
86+ knownVulnerabilities = [ "CVE-2021-42785" ];
87+ # Unfortunately, upstream doesn't maintain the 1.3 branch anymore, and the
88+ # new 2.x branch is substantially different (requiring either Windows or Java)
8589 };
8690}