From 498a2593136ed252402c8e9e1fb2ae873be3bac2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Tue, 2 Jun 2026 10:45:38 -0700
Subject: [PATCH] bzip2_1_1: mark insecure

(cherry picked from commit ced25ca9a913c9238668f049d813626393d805e0)
---
 pkgs/tools/compression/bzip2/1_1.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/tools/compression/bzip2/1_1.nix b/pkgs/tools/compression/bzip2/1_1.nix
index 5d84b4a52f54..cb9659bc8de0 100644
--- a/pkgs/tools/compression/bzip2/1_1.nix
+++ b/pkgs/tools/compression/bzip2/1_1.nix
@@ -50,5 +50,8 @@ stdenv.mkDerivation (finalAttrs: {
     pkgConfigModules = [ "bz2" ];
     platforms = lib.platforms.all;
     maintainers = [ ];
+    knownVulnerabilities = [
+      "CVE-2026-42250"
+    ];
   };
 })