From d9fe263f6c0e5619a543d1323d2d6ba6a797b8b0 Mon Sep 17 00:00:00 2001 From: OPNA2608 Date: Wed, 23 Sep 2026 21:22:47 +0200 Subject: [PATCH] {palemoon-bin,palemoon-gtk2-bin}: Remove OPNA2608 from meta.maintainers, add known vulnerabilities Not up-to-date, I no longer feel comfortable maintaining this, and the package is being dropped on master due to GTK2 removal. Not-cherry-picked-because: Package is being dropped on master instead --- pkgs/by-name/pa/palemoon-bin/package.nix | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/pkgs/by-name/pa/palemoon-bin/package.nix b/pkgs/by-name/pa/palemoon-bin/package.nix index 181ba7f2bc08..d0e60ec5c746 100644 --- a/pkgs/by-name/pa/palemoon-bin/package.nix +++ b/pkgs/by-name/pa/palemoon-bin/package.nix @@ -225,10 +225,25 @@ stdenv.mkDerivation (finalAttrs: { # TODO free, redistributable? Has strict limitations on what modifications may be done & shipped by packagers } ]; - maintainers = with lib.maintainers; [ OPNA2608 ]; + maintainers = [ ]; sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ]; mainProgram = "palemoon"; platforms = [ "x86_64-linux" ]; hydraPlatforms = [ ]; + knownVulnerabilities = [ + "CVE-2026-74943" + "CVE-2026-74945" + "CVE-2026-74964" + "CVE-2026-74969" + "CVE-2026-74971" + "CVE-2026-74977" + "CVE-2026-74982" + "CVE-2026-92012" + "CVE-2026-92016" + "CVE-2026-92030" + "CVE-2026-92044" + "CVE-2026-92049" + "\"several others [security issues] that did not have a CVE designation at the time of evaluation\"" + ]; }; })