networkmanager-sstp: Mark as vulnerable to CVE-2026-91837

https://blogs.gnome.org/mcatanzaro/2026/09/15/privilege-escalation-vulnerabilities-in-networkmanager-plugins/

Unmaintained upstream and no patch currently available:
https://gitlab.gnome.org/GNOME/network-manager-sstp/-/work_items/67

(cherry picked from commit 8eced6a02d)
This commit is contained in:
Jan Tojnar
2026-09-21 00:23:19 +02:00
parent d03a16006c
commit 26fa5cd1cd

View File

@@ -78,6 +78,9 @@ stdenv.mkDerivation rec {
meta = {
description = "NetworkManager's sstp plugin";
inherit (networkmanager.meta) maintainers teams platforms;
knownVulnerabilities = [
"CVE-2026-91838"
];
license = lib.licenses.gpl2Plus;
};
}