From 1c009d547d610979da59d10a93dbad485942c87f Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Thu, 18 Dec 2025 11:35:11 +0100 Subject: [PATCH] librewolf-bin: mark with `knownVulnerabilities` due to lack of maintenance in nixpkgs This security-critical package is currently not maintained well enough to be kept as is. We are currently providing a 4 months old version which is not acceptable for a browser. PR #464467 created by r-ryantm 3 weeks ago was not handled by anyone. See also #416711 for previous discussions. --- pkgs/by-name/li/librewolf-bin-unwrapped/package.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix index 1bd8a3242013..03ce92adf84a 100644 --- a/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix +++ b/pkgs/by-name/li/librewolf-bin-unwrapped/package.nix @@ -113,5 +113,8 @@ stdenv.mkDerivation { mainProgram = "librewolf"; hydraPlatforms = [ ]; sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ]; + knownVulnerabilities = [ + "librewolf-bin lacks maintenance in nixpkgs, consider using an alternative" + ]; }; }