NixOS / nixpkgs

Nix Packages collection & NixOS
MIT License
16.67k stars 13.12k forks source link

Build failure: arrayfire: dependency marked insecure #305686

Open tmplt opened 3 months ago

tmplt commented 3 months ago

Steps To Reproduce

nix build nixpkgs/29e4c2ef170e66021e31b3612cc4516c1abf940a#arrayfire

Build log

<snip>

       error: Package ‘freeimage-unstable-2021-11-01’ in /nix/store/ppniwca1rrbyywfqgp80xx1lxrdripp9-source/pkgs/development/libraries/freeimage/default.nix:72 is marked as insecure, refusing to evaluate.

       Known issues:
        - CVE-2021-33367
        - CVE-2021-40262
        - CVE-2021-40263
        - CVE-2021-40264
        - CVE-2021-40265
        - CVE-2021-40266
        - CVE-2023-47992
        - CVE-2023-47993
        - CVE-2023-47994
        - CVE-2023-47995
        - CVE-2023-47996

<snip>

Additional context

On today's head, 29e4c2ef170e66021e31b3612cc4516c1abf940a.

Notify maintainers

@chessai

Metadata

Please run nix-shell -p nix-info --run "nix-info -m" and paste the result.

[user@system:~]$ nix-shell -p nix-info --run "nix-info -m"
 - system: `"x86_64-linux"`
 - host os: `Linux 6.6.27, NixOS, 23.11 (Tapir), 23.11.20240414.6ec8515`
 - multi-user?: `yes`
 - sandbox: `yes`
 - version: `nix-env (Nix) 2.18.1`
 - nixpkgs: `/nix/var/nix/profiles/per-user/root/channels/nixos`

Add a :+1: reaction to issues you find important.

eclairevoyant commented 3 months ago

reported upstream: https://github.com/arrayfire/arrayfire/issues/3547