[Backport release-24.05] minidjvu: mark as vulnerable (#351644)

This commit is contained in:
Masum Reza
2024-10-27 23:40:52 +05:30
committed by GitHub

View File

@@ -26,5 +26,8 @@ stdenv.mkDerivation rec {
maintainers = [ lib.maintainers.viric ];
platforms = lib.platforms.unix;
mainProgram = "minidjvu";
knownVulnerabilities = [
"minidjvu is vulnerable to a number of out-of-bound read vulnerabilities, potentially causing denials of service (CVE-2017-12441, CVE-2017-12442, CVE-2017-12443, CVE-2017-12444, CVE-2017-12445)"
];
};
}