summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Scott <code@humanleg.org.uk>2021-12-18 12:56:45 +0000
committerGitHub <noreply@github.com>2021-12-18 12:56:45 +0000
commit2949ed36539dcc6cd08e95b25d42e19ffab3d027 (patch)
tree10e14b099e5a75508f6377fdaef093e0a13c585a
parentMerge pull request #150904 from 0x4A6F/backport-150511-to-release-21.05 (diff)
parenttightvnc: mark as insecure (fixes #150704) (diff)
downloadnixpkgs-2949ed36539dcc6cd08e95b25d42e19ffab3d027.tar.gz
Merge pull request #151182 from NixOS/backport-151124-to-release-21.05
[Backport release-21.05] tightvnc: mark as insecure (fixes #150704)
-rw-r--r--pkgs/tools/admin/tightvnc/default.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/pkgs/tools/admin/tightvnc/default.nix b/pkgs/tools/admin/tightvnc/default.nix
index 1bfb3be113da..872192fc97fd 100644
--- a/pkgs/tools/admin/tightvnc/default.nix
+++ b/pkgs/tools/admin/tightvnc/default.nix
@@ -81,5 +81,9 @@ stdenv.mkDerivation {
maintainers = [];
platforms = lib.platforms.unix;
+
+ knownVulnerabilities = [ "CVE-2021-42785" ];
+ # Unfortunately, upstream doesn't maintain the 1.3 branch anymore, and the
+ # new 2.x branch is substantially different (requiring either Windows or Java)
};
}