Unverified Commit 30d55d2a authored by Vladimír Čunát's avatar Vladimír Čunát Committed by GitHub
Browse files

whisper: set knownVulnerabilities due to dated vendored libraries (#457885)

parents 5c7408b3 afc8879d

pkgs/by-name/wh/whisper/package.nix

+9 −0
Original line number Diff line number Diff line
@@ -51,6 +51,15 @@ stdenv.mkDerivation rec { 
    broken = stdenv.hostPlatform.isDarwin;

    description = "Short read sequence mapper";

    license = licenses.gpl3;

    # vendored libraries acof, aelf, deflate, bzip2, zlib

    # https://github.com/refresh-bio/Whisper/issues/18

    knownVulnerabilities = [

      # src/libs/libz.a from 2017

      "CVE-2018-25032"

      "CVE-2022-37434"

      # src/libs/libbzip2.lib

      "CVE-2019-12900"

    ];

    homepage = "https://github.com/refresh-bio/whisper";

    maintainers = with maintainers; [ jbedo ];

    platforms = platforms.x86_64;