minidjvu

0.8Eval error

Black-and-white djvu page encoder and decoder that use interpage information

Planning log · · This campaign

pkgs/by-name/mi/minidjvu/package.nix
Package ‘minidjvu-0.8’ is marked as insecure, refusing to evaluate.
Full diagnostic
GC Warning: Failed to expand heap by 4194304 KiB
error:
       … while evaluating attribute 'drv'
         at /nix/store/kwli1syc3yhl69wcl9690i8gwbawsj8x-filnix-experiment-0.13.3/lib/experiment/planner.nix:14:3:
           13| {
           14|   drv = p.drvPath;
             |   ^
           15|   name = p.name;

       … while evaluating the attribute 'drvPath'
         at /nix/store/bpid1kw336xa8sajabd2f9vi4siqbcg6-source/lib/customisation.nix:418:7:
          417|     // {
          418|       drvPath =
             |       ^
          419|         assert condition;

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: Package ‘minidjvu-0.8’ in /nix/store/bpid1kw336xa8sajabd2f9vi4siqbcg6-source/pkgs/by-name/mi/minidjvu/package.nix:33 is marked as insecure, refusing to evaluate.


       Known issues:
        - minidjvu is vulnerable to a number of out-of-bound read vulnerabilities, potentially causing denials of service (CVE-2017-12441, CVE-2017-12442, CVE-2017-12443, CVE-2017-12444, CVE-2017-12445)

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘minidjvu-0.8’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "minidjvu-0.8"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘minidjvu-0.8’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "minidjvu-0.8"
              ];
            }

Direct dependencies

None recorded.

Selected dependents

None recorded.