Skip to content

Commit 90f44b3

Browse files
committed
nix: remove fixed CVE-2024-27297 check
1 parent 0e59e7b commit 90f44b3

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

pkgs/tools/package-management/nix/common.nix

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -12,14 +12,6 @@ assert (hash == null) -> (src != null);
1212
let
1313
atLeast224 = lib.versionAtLeast version "2.24pre";
1414
atLeast225 = lib.versionAtLeast version "2.25pre";
15-
# Major.minor versions unaffected by CVE-2024-27297
16-
unaffectedByFodSandboxEscape = [
17-
"2.3"
18-
"2.16"
19-
"2.18"
20-
"2.19"
21-
"2.20"
22-
];
2315
in
2416
{ stdenv
2517
, autoconf-archive
@@ -320,7 +312,6 @@ self = stdenv.mkDerivation {
320312
platforms = platforms.unix;
321313
outputsToInstall = [ "out" ] ++ optional enableDocumentation "man";
322314
mainProgram = "nix";
323-
knownVulnerabilities = lib.optional (!builtins.elem (lib.versions.majorMinor version) unaffectedByFodSandboxEscape && !atLeast221) "CVE-2024-27297";
324315
};
325316
};
326317
in self

0 commit comments

Comments
 (0)