From 067184e57484183a95a387f0ca1adbd00ecaf664 Mon Sep 17 00:00:00 2001
From: Lin Jian <me@linj.tech>
Date: Sun, 2 Mar 2025 03:14:03 +0800
Subject: [PATCH] emacs: mark version < 30 as insecure and tell users to use
 emacs30

---
 pkgs/applications/editors/emacs/make-emacs.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/applications/editors/emacs/make-emacs.nix b/pkgs/applications/editors/emacs/make-emacs.nix
index c50c3a66bd60..51795c98737d 100644
--- a/pkgs/applications/editors/emacs/make-emacs.nix
+++ b/pkgs/applications/editors/emacs/make-emacs.nix
@@ -520,5 +520,8 @@ mkDerivation (finalAttrs: {
 
   meta = meta // {
     broken = withNativeCompilation && !(stdenv.buildPlatform.canExecute stdenv.hostPlatform);
+    knownVulnerabilities = lib.optionals (lib.versionOlder version "30") [
+      "CVE-2024-53920 CVE-2025-1244, please use newer versions such as emacs30"
+    ];
   };
 })