Merge pull request #111579 from dotlambda/libsixel-insecure

libsixel: mark as insecure
2021-02-01 17:10:16 +01:00
parent 31da4478f5 bcfec5c773
commit 73bf313f08
1 changed files with 4 additions and 0 deletions
@@ -22,5 +22,9 @@ stdenv.mkDerivation rec {
    maintainers = with maintainers; [ vrthra ];
    license = licenses.mit;
    platforms = with platforms; unix;
+    knownVulnerabilities = [
+      "CVE-2020-11721" # https://github.com/saitoha/libsixel/issues/134
+      "CVE-2020-19668" # https://github.com/saitoha/libsixel/issues/136
+    ];
  };
 }