From 32309e44684573695f70b7e3845925be05f8db9f Mon Sep 17 00:00:00 2001 From: Florian Klink Date: Sun, 13 Oct 2024 16:28:39 +0300 Subject: [PATCH] wire-desktop: add CVE-2024-6775 to knownVulnerabilities wire-desktop on Linux uses electron 29.4.5, which is known to be vulnerable to CVE-2024-6775: https://github.com/wireapp/wire-desktop/blob/cf65edb5981be370f3284555512696175099e234/package.json#L85 The MacOS version is even older, and affected by this too. --- .../networking/instant-messengers/wire-desktop/default.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/applications/networking/instant-messengers/wire-desktop/default.nix b/pkgs/applications/networking/instant-messengers/wire-desktop/default.nix index 2030a3f467b4..1b4ae2a4e74a 100644 --- a/pkgs/applications/networking/instant-messengers/wire-desktop/default.nix +++ b/pkgs/applications/networking/instant-messengers/wire-desktop/default.nix @@ -57,6 +57,7 @@ let homepage = "https://wire.com/"; downloadPage = "https://wire.com/download/"; sourceProvenance = with sourceTypes; [ binaryNativeCode ]; + knownVulnerabilities = [ "CVE-2024-6775" ]; license = licenses.gpl3Plus; maintainers = with maintainers; [ arianvp