[23.05] mark old flutters as insecure

This commit is contained in:
Maciej Krüger
2023-09-25 15:32:24 +02:00
parent c57ff84913
commit 9f15ef0cd9
2 changed files with 11 additions and 7 deletions

View File

@@ -94,7 +94,7 @@ in
patches = flutter3Patches;
};
v37 = mkFlutter {
v37 = let flutter = mkFlutter {
version = "3.7.12";
engineVersion = "1a65d409c7a1438a34d21b60bf30a6fd5db59314";
dartVersion = "2.19.6";
@@ -111,7 +111,7 @@ in
aarch64-darwin = "sha256-yetEE65UP2Wh9ocx7nClQjYLHO6lIbZPay1+I2tDSM4=";
};
patches = flutter37Patches;
};
}; in flutter // { meta = flutter.meta // { knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
v2 = let flutter = mkFlutter {
version = "2.10.5";
@@ -132,5 +132,5 @@ in
aarch64-darwin = lib.fakeHash;
};
patches = flutter2Patches;
}; in flutter // { meta = flutter.meta // { platforms = [ "x86_64-linux" "aarch64-linux" ]; }; };
}; in flutter // { meta = flutter.meta // { platforms = [ "x86_64-linux" "aarch64-linux" ]; knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
}

View File

@@ -14869,11 +14869,15 @@ with pkgs;
flutterPackages =
recurseIntoAttrs (callPackage ../development/compilers/flutter { });
flutter-unwrapped = flutterPackages.stable;
flutter37-unwrapped = flutterPackages.v37;
flutter2-unwrapped = flutterPackages.v2;
flutter37-unwrapped = let flutter =flutterPackages.v37;
in flutter // { meta = flutter.meta // { insecure = true; knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
flutter2-unwrapped = let flutter = flutterPackages.v2;
in flutter // { meta = flutter.meta // { platforms = [ "x86_64-linux" "aarch64-linux" ]; insecure = true; knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
flutter = flutterPackages.wrapFlutter flutter-unwrapped;
flutter37 = flutterPackages.wrapFlutter flutter37-unwrapped;
flutter2 = flutterPackages.wrapFlutter flutter2-unwrapped;
flutter37 = let flutter = flutterPackages.wrapFlutter flutter37-unwrapped;
in flutter // { meta = flutter.meta // { insecure = true; knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
flutter2 = let flutter = flutterPackages.wrapFlutter flutter2-unwrapped;
in flutter // { meta = flutter.meta // { platforms = [ "x86_64-linux" "aarch64-linux" ]; insecure = true; knownVulnerabilities = [ "CVE-2023-4863 WebP Vulnerability" ]; }; };
fnm = callPackage ../development/tools/fnm {
inherit (darwin.apple_sdk.frameworks) DiskArbitration Foundation Security;