summary refs log tree commit diff
path: root/pkgs/tools/networking/openssh
diff options
context:
space:
mode:
authorJanne Heß <janne@hess.ooo>2021-03-11 11:57:14 +0100
committerJanne Heß <janne@hess.ooo>2021-03-11 11:58:00 +0100
commit2b1011d4a3797d7e0f6f29afa1786d3cf2464019 (patch)
treea4b3a116b33442d812c8305afc05bb9dec33631e /pkgs/tools/networking/openssh
parentc99c4998fd92f284b1c2ff542878e06ea15d3d3d (diff)
downloadnixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar.gz
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar.bz2
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar.lz
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar.xz
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.tar.zst
nixpkgs-2b1011d4a3797d7e0f6f29afa1786d3cf2464019.zip
openssh_hpn/openssh_gssapi: Add CVE-2021-28041
Diffstat (limited to 'pkgs/tools/networking/openssh')
-rw-r--r--pkgs/tools/networking/openssh/common.nix3
-rw-r--r--pkgs/tools/networking/openssh/default.nix8
2 files changed, 10 insertions, 1 deletions
diff --git a/pkgs/tools/networking/openssh/common.nix b/pkgs/tools/networking/openssh/common.nix
index 9d4aaad25cd..0fefcc259fb 100644
--- a/pkgs/tools/networking/openssh/common.nix
+++ b/pkgs/tools/networking/openssh/common.nix
@@ -4,6 +4,7 @@
 , src
 , extraPatches ? []
 , extraNativeBuildInputs ? []
+, extraMeta ? {}
 }:
 
 { lib, stdenv
@@ -111,5 +112,5 @@ stdenv.mkDerivation rec {
     license = licenses.bsd2;
     platforms = platforms.unix ++ platforms.windows;
     maintainers = with maintainers; [ eelco aneeshusa ];
-  };
+  } // extraMeta;
 }
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix
index 67082b15bc5..3ea35daaeb3 100644
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -33,6 +33,10 @@ in {
     ];
 
     extraNativeBuildInputs = [ autoreconfHook ];
+
+    extraMeta.knownVulnerabilities = [
+      "CVE-2021-28041"
+    ];
   };
 
   openssh_gssapi = common rec {
@@ -59,5 +63,9 @@ in {
     ];
 
     extraNativeBuildInputs = [ autoreconfHook ];
+
+    extraMeta.knownVulnerabilities = [
+      "CVE-2021-28041"
+    ];
   };
 }