From eb270e849c5e3d2868816e12f4498304f1a23fb6 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Sun, 22 May 2022 12:23:46 +0200 Subject: [PATCH] solr: remove maintainer, mark as vulnerable The solr update in #161875 has gone nowhere sofar, while multiple CVEs are lingering, which makes this a prime candidate to mark insecure. The maintainer has indicated they wanted to remove themself, which has not happened yet, so this takes care of that. https://github.com/NixOS/nixpkgs/pull/161875#issuecomment-1058025102 --- pkgs/servers/search/solr/default.nix | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/pkgs/servers/search/solr/default.nix b/pkgs/servers/search/solr/default.nix index 479a7616ae1..a3b75134107 100644 --- a/pkgs/servers/search/solr/default.nix +++ b/pkgs/servers/search/solr/default.nix @@ -33,7 +33,11 @@ stdenv.mkDerivation rec { description = "Open source enterprise search platform from the Apache Lucene project"; license = licenses.asl20; platforms = platforms.all; - maintainers = with maintainers; [ aanderse ]; + maintainers = with maintainers; [ ]; + knownVulnerabilities = [ + "Multiple security issues throughout 2021, see https://solr.apache.org/security.html" + "Package is outdated and has no maintainer" + ]; }; }