libexosip: 4.1.0 -> 5.2.0

Fix CVE-2014-10375. sipwitch is marked as broken as it does compile with libexosip > 5.0.0 and the upstream project appears to be stalled/abandoned.
2021-01-22 11:58:00 +01:00
parent 59863dc3d7
commit fdafac8b00
2 changed files with 5 additions and 11 deletions
@@ -23,5 +23,6 @@ stdenv.mkDerivation rec {
    license = lib.licenses.gpl3Plus;
    maintainers = with lib.maintainers; [ ];
    platforms = with lib.platforms; linux;
+    broken = true; # Require libexosip2 < 5.0.0 which is vulnerable to CVE-2014-10375.
  };
 }