emacs: mark version < 30 as insecure and tell users to use emacs30 (#386174)

2025-03-02 06:18:02 +08:00
parent e5fad5185b 067184e574
commit f4078f4b53
1 changed files with 3 additions and 0 deletions
@@ -520,5 +520,8 @@ mkDerivation (finalAttrs: {

  meta = meta // {
    broken = withNativeCompilation && !(stdenv.buildPlatform.canExecute stdenv.hostPlatform);
+    knownVulnerabilities = lib.optionals (lib.versionOlder version "30") [
+      "CVE-2024-53920 CVE-2025-1244, please use newer versions such as emacs30"
+    ];
  };
 })