Skip to content

Commit

Permalink
nheko: mark as insecure (NixOS#48281)
Browse files Browse the repository at this point in the history
The package is no longer maintained and includes potential security
vulnerabilities (a use-after-free and several crashes) that are known
and not fixed in the version present in nixpkgs. They don't look too bad
judging from the trigger vectors mentioned in the changelog, but with
the project going unmaintained one of them becoming a security
vulnerability would likely not be noticed.
  • Loading branch information
Ekleog authored and xeji committed Oct 12, 2018
1 parent e2d857a commit ad992cb
Showing 1 changed file with 1 addition and 0 deletions.
Expand Up @@ -70,5 +70,6 @@ stdenv.mkDerivation rec {
maintainers = with maintainers; [ ekleog fpletz ];
platforms = platforms.unix;
license = licenses.gpl3Plus;
knownVulnerabilities = [ "No longer maintained" ];
};
}

0 comments on commit ad992cb

Please sign in to comment.