From f7ab04ac4306ea0331c3cb37d2e97119efe56af4 Mon Sep 17 00:00:00 2001 From: Claude Doppler Date: Thu, 31 Jul 2025 18:59:35 +0200 Subject: [PATCH] squid: remove knownVulnerabilities for 7.0+ In the past, it has been brought up that Squid had many security vulnerabilities (see https://megamansec.github.io/Squid-Security-Audit/). As of version 7.0, all of them have been solved, as tracked in their GitHub Security page: https://github.com/squid-cache/squid/security --- pkgs/by-name/sq/squid/package.nix | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pkgs/by-name/sq/squid/package.nix b/pkgs/by-name/sq/squid/package.nix index e7d3c325e1ac..569c9f556f2e 100644 --- a/pkgs/by-name/sq/squid/package.nix +++ b/pkgs/by-name/sq/squid/package.nix @@ -101,8 +101,10 @@ stdenv.mkDerivation (finalAttrs: { license = licenses.gpl2Plus; platforms = platforms.linux; maintainers = with maintainers; [ raskin ]; - knownVulnerabilities = [ - "Squid has multiple unresolved security vulnerabilities, for more information see https://megamansec.github.io/Squid-Security-Audit/" - ]; + # In the past, it has been brought up that Squid had many security vulnerabilities + # (see https://megamansec.github.io/Squid-Security-Audit/). As of version 7.0, + # all of them have been solved, as tracked in their GitHub Security page: + # https://github.com/squid-cache/squid/security + knownVulnerabilities = [ ]; }; })