summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Gerbet <thomas@gerbet.me>2023-10-14 18:11:47 +0200
committergithub-actions[bot] <github-actions[bot]@users.noreply.github.com>2023-10-16 00:02:48 +0000
commit71a852f0f80cc2537fab9dd9ea90f53a6853f26a (patch)
tree1dfe0b0073e4a20923c3e847ced7623e443b9306
parentMerge pull request #261011 from NixOS/backport-260647-to-release-23.05 (diff)
downloadnixpkgs-origin/backport-261091-to-release-23.05.tar.gz
squid: mark with known vulnerabilitiesorigin/backport-261091-to-release-23.05
https://megamansec.github.io/Squid-Security-Audit/ It does not look like the vulnerabilities are going to be fixed anytime soon. (cherry picked from commit 761d125ae2cd0341183de99af31d3f38c41e9754)
-rw-r--r--pkgs/servers/squid/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/servers/squid/default.nix b/pkgs/servers/squid/default.nix
index 26fe887cb774..67c1fb135450 100644
--- a/pkgs/servers/squid/default.nix
+++ b/pkgs/servers/squid/default.nix
@@ -55,5 +55,6 @@ stdenv.mkDerivation rec {
license = licenses.gpl2Plus;
platforms = platforms.linux;
maintainers = with maintainers; [ raskin ];
+ knownVulnerabilities = [ "Squid has multiple unresolved security vulnerabilities, for more information see https://megamansec.github.io/Squid-Security-Audit/" ];
};
}