libsixel: mark as insecure

2021-02-01 16:41:11 +01:00 · 2021-02-01 16:41:11 +01:00 · bcfec5c773
commit bcfec5c773
parent 457ff6d28e
1 changed files with 4 additions and 0 deletions
--- a/pkgs/development/libraries/libsixel/default.nix
+++ b/pkgs/development/libraries/libsixel/default.nix
@ -22,5 +22,9 @@ stdenv.mkDerivation rec {
    maintainers = with maintainers; [ vrthra ];
    license = licenses.mit;
    platforms = with platforms; unix;
+    knownVulnerabilities = [
+      "CVE-2020-11721" # https://github.com/saitoha/libsixel/issues/134
+      "CVE-2020-19668" # https://github.com/saitoha/libsixel/issues/136
+    ];
  };
 }