Commit 32309e44 authored by Florian Klink's avatar Florian Klink
Browse files

wire-desktop: add CVE-2024-6775 to knownVulnerabilities 

wire-desktop on Linux uses electron 29.4.5, which is known to be
vulnerable to CVE-2024-6775:

https://github.com/wireapp/wire-desktop/blob/cf65edb5981be370f3284555512696175099e234/package.json#L85

The MacOS version is even older, and affected by this too.
parent d2d9d9f0

pkgs/applications/networking/instant-messengers/wire-desktop/default.nix

+1 −0
Original line number Diff line number Diff line
@@ -57,6 +57,7 @@ let 
    homepage = "https://wire.com/";

    downloadPage = "https://wire.com/download/";

    sourceProvenance = with sourceTypes; [ binaryNativeCode ];

    knownVulnerabilities = [ "CVE-2024-6775" ];

    license = licenses.gpl3Plus;

    maintainers = with maintainers; [

      arianvp