armcord,mailspring: mark as insecure (CVE-2023-4863)

See #254798. Upstream has not provided any update for this critical
vulnerability in > 2 weeks. These programs are also likely vulnerable to
many more old vulnerabilities due to using EOL versions of Electron.
This commit is contained in:
Pierre Bourdon
2023-09-30 17:29:34 +02:00
parent 7ac382de24
commit dddf103e80
2 changed files with 2 additions and 0 deletions
@@ -138,5 +138,6 @@ stdenv.mkDerivation rec {
maintainers = with maintainers; [ ludovicopiero wrmilling ];
platforms = [ "x86_64-linux" "aarch64-linux" ];
mainProgram = "armcord";
knownVulnerabilities = [ "CVE-2023-4863" ];
};
}
@@ -99,5 +99,6 @@ stdenv.mkDerivation rec {
homepage = "https://getmailspring.com";
downloadPage = "https://github.com/Foundry376/Mailspring";
platforms = [ "x86_64-linux" ];
knownVulnerabilities = [ "CVE-2023-4863" ];
};
}