Security fix: Nix fixed-output derivation sandbox bypass

[deftdawg]

rnix-lsp is the package that was requiring nix-2.15.3, per this thread…

NixOS: Need help finding out what is pulling in nix-2.15.3 in my config

Problem When I run nixos-rebuild, I get the following error: error: Package ‘nix-2.15.3’ in /nix/store/y0c95bwyvs80pm69hdd4b11pyq2ghiwh-source/pkgs/tools/package-management/nix/common.nix:249 is marked as insecure, refusing to evaluate. Known issues: - CVE-2024-27297 You can install it anyway by allowing this package, using the following methods: How can I figure out which part of my config is responsible for pulling in nix-2.15.3? Context With CVE-202…

Unfortunately, I’m still a bit lost as to how that was determined… maybe by greping nixpkgs.