Merge pull request #163674 from K900/hugops-yandex
commitfcc7311dc7567993a6ef84d61a2fbd4532bbabda
authorMartin Weinelt <mweinelt@users.noreply.github.com>
dateFri 11 Mar 2022, 20:03 (5 years ago)
parentf01213edde9e8d
pkgs/applications/networking/browsers/yandex-browser/default.nix+7
@@ -132,5 +132,12 @@ stdenv.mkDerivation rec {
132132 license = licenses.unfree;
133133 maintainers = with maintainers; [ dan4ik605743 ];
134134 platforms = [ "x86_64-linux" ];
135+
136+ knownVulnerabilities = [
137+ ''
138+ Trusts a Russian government issued CA certificate for some websites.
139+ See https://habr.com/en/company/yandex/blog/655185/ (Russian) for details.
140+ ''
141+ ];
135142 };
136143}