summary refs log tree commit diff
path: root/pkgs/shells/rssh
diff options
context:
space:
mode:
authorAndreas Rammhold <andreas@rammhold.de>2019-03-20 14:30:49 +0100
committerAndreas Rammhold <andreas@rammhold.de>2019-03-20 14:33:13 +0100
commit8ff37d9c45468951f18e0c5dc4d456c9f85817dd (patch)
tree22f8c052a210715e9687d58338cf181def4c07f8 /pkgs/shells/rssh
parentde0612c46cf17a368e92eaac91fd94affbe36488 (diff)
downloadnixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar.gz
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar.bz2
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar.lz
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar.xz
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.tar.zst
nixpkgs-8ff37d9c45468951f18e0c5dc4d456c9f85817dd.zip
rssh: mark as insecure
There seems to be a consensus among many packagers that RSSH is
probably no longer a good idea. There are a few fixes for some of the
issues but people should move on and use other software these days.

Removing it from further (stable) releases is probably a good idea. If
someone really needs it we still have it in the tree and they can
whitelist it again.
Diffstat (limited to 'pkgs/shells/rssh')
-rw-r--r--pkgs/shells/rssh/default.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/pkgs/shells/rssh/default.nix b/pkgs/shells/rssh/default.nix
index c58fda28db0..d061c888f60 100644
--- a/pkgs/shells/rssh/default.nix
+++ b/pkgs/shells/rssh/default.nix
@@ -84,6 +84,11 @@ stdenv.mkDerivation rec {
     license = licenses.bsd2;
     platforms = platforms.linux;
     maintainers = with maintainers; [ arobyn ];
+    knownVulnerabilities = [
+      "CVE-2019-1000018"
+      "CVE-2019-3463"
+      "CVE-2019-3464"
+    ];
   };
 
   passthru = {