summary refs log tree commit diff
path: root/pkgs/applications/networking
diff options
context:
space:
mode:
authorVladimír Čunát <v@cunat.cz>2020-01-10 16:58:10 +0100
committerVladimír Čunát <v@cunat.cz>2020-01-10 17:08:01 +0100
commitf703a3a04a657b569c0881326ffaffad31ac0bca (patch)
tree01d00c60f979b1969a231e2ab5cef67df3c51e61 /pkgs/applications/networking
parent47e0ce7f1a640bc71aaaaf837a8bcf7c95c777b2 (diff)
downloadnixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar.gz
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar.bz2
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar.lz
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar.xz
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.tar.zst
nixpkgs-f703a3a04a657b569c0881326ffaffad31ac0bca.zip
firefox-esr-60: mark as vulnerable
The last release was in September, so it's surely "vulnerable" now.
https://www.mozilla.org/en-US/firefox/60.9.0/releasenotes/

This is the same appproach we've taken for esr-52.
Diffstat (limited to 'pkgs/applications/networking')
-rw-r--r--pkgs/applications/networking/browsers/firefox/packages.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkgs/applications/networking/browsers/firefox/packages.nix b/pkgs/applications/networking/browsers/firefox/packages.nix
index 0032e607ec8..7903a345e1f 100644
--- a/pkgs/applications/networking/browsers/firefox/packages.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages.nix
@@ -89,6 +89,7 @@ rec {
 
     meta = firefox.meta // {
       description = "A web browser built from Firefox Extended Support Release source tree";
+      knownVulnerabilities = [ "Support ended around October 2019." ];
     };
     updateScript = callPackage ./update.nix {
       attrPath = "firefox-esr-60-unwrapped";