[Backport release-24.11] nexus: mark as insecure and remove inactive maintainers (#421050)

This commit is contained in:
Wolfgang Walther
2025-06-29 17:28:28 +00:00
committed by GitHub

View File

@@ -60,11 +60,15 @@ stdenv.mkDerivation rec {
sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
license = lib.licenses.epl10;
platforms = lib.platforms.all;
maintainers = with lib.maintainers; [
aespinosa
ironpinguin
luftmensch-luftmensch
zaninime
knownVulnerabilities = [
"Nexus 3.77 + 3.78 fixed a bunch of security issues: https://help.sonatype.com/en/sonatype-nexus-repository-3-78-0-release-notes.html"
"CVE-2024-47554"
"CVE-2024-5764"
"Sonatype-2015-0286"
"Sonatype-2022-6438"
"CVE-2023-6378"
"CVE-2023-4218"
];
maintainers = with lib.maintainers; [ ];
};
}