diff --git a/nixos/release-combined.nix b/nixos/release-combined.nix index 00f695949273..617a0d0ca2cb 100644 --- a/nixos/release-combined.nix +++ b/nixos/release-combined.nix @@ -65,7 +65,6 @@ in rec { (all "nixos.tests.containers-imperative") (all "nixos.tests.containers-ipv4") (all "nixos.tests.containers-ipv6") - "nixos.tests.chromium.x86_64-linux" (all "nixos.tests.firefox") (all "nixos.tests.firewall") (all "nixos.tests.fontconfig-default-fonts") diff --git a/pkgs/applications/networking/browsers/chromium/browser.nix b/pkgs/applications/networking/browsers/chromium/browser.nix index cc3962db87b0..4abb56ba2a7d 100644 --- a/pkgs/applications/networking/browsers/chromium/browser.nix +++ b/pkgs/applications/networking/browsers/chromium/browser.nix @@ -86,5 +86,15 @@ mkChromiumDerivation (base: rec { # backported to 19.09. Therefore we'll only maintain M81 for NixOS 19.09 # which will give us approx. one month of security updates / time for users # to transition to 20.03 (as per our policy). + knownVulnerabilities = [ + # Since the release of M83 the previous version isn't secure anymore. + # nixos-unstable update: https://github.com/NixOS/nixpkgs/pull/88206 + '' + This version of Chromium is no longer being updated. Consider switching + to the new stable NixOS channel or installing Chromium from a different + channel. A list of the missing security fixes can be found here: + https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html + '' + ]; }; }) diff --git a/pkgs/applications/networking/browsers/google-chrome/default.nix b/pkgs/applications/networking/browsers/google-chrome/default.nix index 53255ec51835..f57071c1467b 100644 --- a/pkgs/applications/networking/browsers/google-chrome/default.nix +++ b/pkgs/applications/networking/browsers/google-chrome/default.nix @@ -137,5 +137,15 @@ in stdenv.mkDerivation { license = licenses.unfree; maintainers = [ maintainers.msteen ]; platforms = [ "x86_64-linux" ]; + knownVulnerabilities = [ + # Since the release of M83 the previous version isn't secure anymore. + # nixos-unstable update: https://github.com/NixOS/nixpkgs/pull/88206 + '' + This version of Google Chrome is no longer being updated. Consider switching + to the new stable NixOS channel or installing Google Chrome from a different + channel. A list of the missing security fixes can be found here: + https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html + '' + ]; }; }