[Backport release-24.05] minidjvu: mark as vulnerable (#351644)

NixOS · Oct 27, 2024 · 59a210b · 59a210b
2 parents 5e34aff + 926a76f
commit 59a210b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkgs/applications/graphics/minidjvu/default.nix b/pkgs/applications/graphics/minidjvu/default.nix
@@ -26,5 +26,8 @@ stdenv.mkDerivation rec {
     maintainers = [ lib.maintainers.viric ];
     platforms = lib.platforms.unix;
     mainProgram = "minidjvu";
+    knownVulnerabilities = [
+      "minidjvu is vulnerable to a number of out-of-bound read vulnerabilities, potentially causing denials of service (CVE-2017-12441, CVE-2017-12442, CVE-2017-12443, CVE-2017-12444, CVE-2017-12445)"
+    ];
   };
 }