Merge pull request #33610 from andir/syncthing-insecure

Mark syncthing012 and syncthing013 as insecure. Fixes #33568
This commit is contained in:
Peter Hoeg 2018-01-08 22:29:57 +08:00 committed by GitHub
commit f84e7fe12d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 0 deletions

@ -24,4 +24,12 @@ buildGoPackage rec {
preBuild = ''
export buildFlagsArray+=("-tags" "noupgrade release")
'';
meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20;
platforms = with stdenv.lib.platforms; linux ++ freebsd ++ openbsd ++ netbsd;
};
}

@ -29,6 +29,7 @@ stdenv.mkDerivation rec {
'';
meta = {
knownVulnerabilities = [ "CVE-2017-1000420" ];
homepage = https://www.syncthing.net/;
description = "Open Source Continuous File Synchronization";
license = stdenv.lib.licenses.mpl20;