diff options
| author | Maximilian Bosch <maximilian@mbosch.me> | 2025-10-17 17:49:52 +0200 |
|---|---|---|
| committer | Maximilian Bosch <maximilian@mbosch.me> | 2025-10-17 17:49:52 +0200 |
| commit | 76b41b119ec29a485ad191209f968f0906ba8422 (patch) | |
| tree | f56f0d9029f086fe36575998161871cb099f7347 /pkgs/development/python-modules/httpserver | |
| parent | a1c24d0868d5300041e8056389ba900dac87b952 (diff) | |
simplesamlphp: remove
See https://github.com/NixOS/nixpkgs/pull/312251#issuecomment-3416076466
I think it's frankly careless to merge something into nixpkgs that's two
patch-releases behind the current patch-level of the _legacy branch_ of
a software. Especially for security-sensitive things.
On top, this got never updated even though there are two high-rated CVEs
in this, i.e. CVE-2025-27773[1] and CVE-2024-52596[2].
[1] https://github.com/advisories/GHSA-46r4-f8gj-xg56
[2] https://github.com/advisories/GHSA-2x65-fpch-2fcm
Diffstat (limited to 'pkgs/development/python-modules/httpserver')
0 files changed, 0 insertions, 0 deletions