discourse: mark vulnerable

The 3.3.3, 3.3.4 and 3.4.2 releases shipped with security fixues.

We will not backport newer Discourse versions to NixOS 24.11. If you are
affected consider migrating to NixOS Unstable or 25.05 once available.
This commit is contained in:
Martin Weinelt
2025-04-08 23:09:00 +02:00
parent 285c6f41a3
commit e795159dc2

View File

@@ -444,6 +444,12 @@ let
maintainers = with maintainers; [ talyz ];
license = licenses.gpl2Plus;
description = "Discourse is an open source discussion platform";
knownVulnerabilities = [
"Various security issues were fixed in newer releases that cannot be backported to NixOS 24.11."
"https://meta.discourse.org/t/3-3-3-security-and-maintenance-release/343239"
"https://meta.discourse.org/t/3-3-4-security-and-maintenance-release/349301"
"https://meta.discourse.org/t/3-4-2-security-and-bug-fix-release/358152"
];
};
passthru = {