Merge pull request #33610 from andir/syncthing-insecure

Mark syncthing012 and syncthing013 as insecure. Fixes #33568
This commit is contained in:
Peter Hoeg
2018-01-08 22:29:57 +08:00
committed by GitHub
2 changed files with 9 additions and 0 deletions
@@ -24,4 +24,12 @@ buildGoPackage rec {
preBuild = '' preBuild = ''
export buildFlagsArray+=("-tags" "noupgrade release") export buildFlagsArray+=("-tags" "noupgrade release")
''; '';
meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20;
platforms = with stdenv.lib.platforms; linux ++ freebsd ++ openbsd ++ netbsd;
};
} }
@@ -29,6 +29,7 @@ stdenv.mkDerivation rec {
''; '';
meta = { meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/; homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization"; description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20; license = stdenv.lib.licenses.mpl20;