summary refs log tree commit diff
path: root/pkgs/tools/video
diff options
context:
space:
mode:
authorAlyssa Ross <hi@alyssa.is>2021-02-12 20:51:31 +0000
committerAlyssa Ross <hi@alyssa.is>2021-04-16 14:06:10 +0000
commit6694363a3a4393edb5b5f6b4b59da69d112ac078 (patch)
tree3d1c6e7d5670d27a36677e8d5426130e956877ae /pkgs/tools/video
parentb1037225ef008c395fce65d3992524e54196dad0 (diff)
downloadnixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar.gz
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar.bz2
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar.lz
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar.xz
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.tar.zst
nixpkgs-6694363a3a4393edb5b5f6b4b59da69d112ac078.zip
swftools: mark insecure; clarify license
Fixes: https://github.com/NixOS/nixpkgs/issues/90991
Diffstat (limited to 'pkgs/tools/video')
-rw-r--r--pkgs/tools/video/swftools/default.nix22
1 files changed, 19 insertions, 3 deletions
diff --git a/pkgs/tools/video/swftools/default.nix b/pkgs/tools/video/swftools/default.nix
index cd3af661840..4d3014388c8 100644
--- a/pkgs/tools/video/swftools/default.nix
+++ b/pkgs/tools/video/swftools/default.nix
@@ -1,6 +1,5 @@
 { lib, stdenv, fetchurl, freetype, libjpeg, libungif, zlib }:
 
-with lib;
 stdenv.mkDerivation rec {
   pname = "swftools";
   version = "0.9.2";
@@ -14,11 +13,28 @@ stdenv.mkDerivation rec {
 
   buildInputs = [ freetype libjpeg libungif zlib ];
 
-  meta = {
+  meta = with lib; {
     description = "Collection of SWF manipulation and creation utilities";
     homepage = "http://www.swftools.org/about.html";
-    license = licenses.gpl2;
+    license = licenses.gpl2Only;
     maintainers = [ maintainers.koral ];
     platforms = lib.platforms.unix;
+    broken = true;
+    knownVulnerabilities = [
+      "CVE-2017-10976"
+      "CVE-2017-11096"
+      "CVE-2017-11097"
+      "CVE-2017-11098"
+      "CVE-2017-11099"
+      "CVE-2017-11100"
+      "CVE-2017-11101"
+      "CVE-2017-16711"
+      "CVE-2017-16793"
+      "CVE-2017-16794"
+      "CVE-2017-16796"
+      "CVE-2017-16797"
+      "CVE-2017-16868"
+      "CVE-2017-16890"
+    ];
   };
 }