Merge pull request #318281 from NickCao/yandex

yandex-browser: mark knownVulnerabilities
2024-06-08 11:04:47 -04:00
parent c7a3cfbb89 c07f1e94c6
commit a7b28ce5fd
1 changed files with 7 additions and 0 deletions
@@ -165,5 +165,12 @@ in stdenv.mkDerivation rec {
    sourceProvenance = with sourceTypes; [ binaryNativeCode ];
    maintainers = with maintainers; [ dan4ik605743 ionutnechita ];
    platforms = [ "x86_64-linux" ];
+
+    knownVulnerabilities = [
+      ''
+      Trusts a Russian government issued CA certificate for some websites.
+      See https://habr.com/en/company/yandex/blog/655185/ (Russian) for details.
+      ''
+    ];
  };
 }