about summary refs log tree commit diff
path: root/pkgs/servers/nextcloud
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2021-01-05 22:31:06 +0100
committerMaximilian Bosch <maximilian@mbosch.me>2021-01-05 22:32:05 +0100
commit78f022e79133c514c3da3a220713451722284b54 (patch)
treee8a174191ba2de729276793eee7fc7059bf813c5 /pkgs/servers/nextcloud
parentf35bf8ef29d2bd9e4f1a915202de355e126a9ffd (diff)
nextcloud: improve documentation on defaults
* It should be made explicit in the eval-error that the CVE only affects
  a component which is turned off by default.
* For more clarity, the default version used by the module is noted in
  the manual.

Closes #108419
Diffstat (limited to 'pkgs/servers/nextcloud')
-rw-r--r--pkgs/servers/nextcloud/default.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/servers/nextcloud/default.nix b/pkgs/servers/nextcloud/default.nix
index 8d4b52a015932..a1c38cdbe28d7 100644
--- a/pkgs/servers/nextcloud/default.nix
+++ b/pkgs/servers/nextcloud/default.nix
@@ -53,7 +53,7 @@ in {
     version = "19.0.6";
     sha256 = "sha256-pqqIayE0OyTailtd2zeYi+G1APjv/YHqyO8jCpq7KJg=";
     extraVulnerabilities = [
-      "Nextcloud 19 is still supported, but CVE-2020-8259 & CVE-2020-8152 are unfixed!"
+      "Nextcloud 19 is still supported, but CVE-2020-8259 & CVE-2020-8152 are unfixed! Please note that both CVEs only affect the file encryption module which is turned off by default. Alternatively, `pkgs.nextcloud20` can be used."
     ];
   };