minidjvu: mark as vulnerable

See https://github.com/NixOS/nixpkgs/issues/90896

(cherry picked from commit a0c6ffc324)
This commit is contained in:
Tomo 2024-10-27 07:07:21 +00:00 committed by github-actions[bot]
parent e31c26bb54
commit 926a76fac7

View File

@ -26,5 +26,8 @@ stdenv.mkDerivation rec {
maintainers = [ lib.maintainers.viric ]; maintainers = [ lib.maintainers.viric ];
platforms = lib.platforms.unix; platforms = lib.platforms.unix;
mainProgram = "minidjvu"; mainProgram = "minidjvu";
knownVulnerabilities = [
"minidjvu is vulnerable to a number of out-of-bound read vulnerabilities, potentially causing denials of service (CVE-2017-12441, CVE-2017-12442, CVE-2017-12443, CVE-2017-12444, CVE-2017-12445)"
];
}; };
} }