olm: mark as vulnerable

See <https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/>.
NixOS · Aug 14, 2024 · 4bb930b · 4bb930b
1 parent 936b261
commit 4bb930b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkgs/development/libraries/olm/default.nix b/pkgs/development/libraries/olm/default.nix
@@ -27,5 +27,8 @@ stdenv.mkDerivation rec {
     homepage = "https://gitlab.matrix.org/matrix-org/olm";
     license = licenses.asl20;
     maintainers = with maintainers; [ tilpner oxzi ];
+    knownVulnerabilities = [
+      "libolm is deprecated upstream with an AES cache timing vulnerability that upstream doesn't plan to fix"
+    ];
   };
 }