Mono: add vulnerabilities

[matthewbauer]

Motivation for this change

See #39282 for discussion

/cc @viric @thoughtpolice @obadz @vrthra

[GrahamcOfBorg]

Success on x86_64-darwin (full log)

Attempted: mono

Partial log (click to expand)

these paths will be fetched (78.80 MiB download, 321.35 MiB unpacked):
  /nix/store/xsrnra6m2iq7y976nh772myncgn13j56-mono-5.8.0.108
copying path '/nix/store/xsrnra6m2iq7y976nh772myncgn13j56-mono-5.8.0.108' from 'https://cache.nixos.org'...
/nix/store/xsrnra6m2iq7y976nh772myncgn13j56-mono-5.8.0.108

[GrahamcOfBorg]

Success on x86_64-linux (full log)

Attempted: mono

Partial log (click to expand)

these paths will be fetched (113.89 MiB download, 434.01 MiB unpacked):
  /nix/store/2l2ybwzmp016j3jkpn0mrwskf7wbqxvx-mono-5.8.0.108
copying path '/nix/store/2l2ybwzmp016j3jkpn0mrwskf7wbqxvx-mono-5.8.0.108' from 'https://cache.nixos.org'...
/nix/store/2l2ybwzmp016j3jkpn0mrwskf7wbqxvx-mono-5.8.0.108

[GrahamcOfBorg]

Failure on aarch64-linux (full log)

Attempted: mono

Partial log (click to expand)

make[5]: *** [build/rules.make:224: all-recursive] Error 1
make[4]: *** [Makefile:53: profile-do--basic--all] Error 2
make[3]: *** [Makefile:49: profiles-do--all] Error 2
make[2]: *** [Makefile:636: all-local] Error 2
make[2]: Leaving directory '/build/mono-5.8.0.108/runtime'
make[1]: *** [Makefile:549: all-recursive] Error 1
make[1]: Leaving directory '/build/mono-5.8.0.108'
make: *** [Makefile:479: all] Error 2
builder for '/nix/store/010lh76nz4w1lziyzyb61s2ixhcn729x-mono-5.8.0.108.drv' failed with exit code 2
�[31;1merror:�[0m build of '/nix/store/010lh76nz4w1lziyzyb61s2ixhcn729x-mono-5.8.0.108.drv' failed

[Mic92]

see also #36711

[Mic92]

Updating mono will break some stuff unfortunately.

[matthewbauer]

Ok dropped the last commit. Still want to put in knownVulnerabilities

[Mic92]

I also tried updating mono last weekend, but it is still wip:
Mic92@54d32e6

[Mic92]

[EDIT] In future we should avoid adding so many different versions of mono.

[GrahamcOfBorg]

No attempt on aarch64-linux (full log)

The following builds were skipped because they don't evaluate on aarch64-linux: mono

Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

[GrahamcOfBorg]

No attempt on x86_64-darwin (full log)

The following builds were skipped because they don't evaluate on x86_64-darwin: mono

Partial log (click to expand)

~/.config/nixpkgs/config.nix, like so:

     {
       permittedInsecurePackages = [
         "mono-4.0.4.1"
       ];
     }

[GrahamcOfBorg]

No attempt on x86_64-linux (full log)

The following builds were skipped because they don't evaluate on x86_64-linux: mono

Partial log (click to expand)

~/.config/nixpkgs/config.nix, like so:

     {
       permittedInsecurePackages = [
         "mono-4.0.4.1"
       ];
     }

[ShalokShalom]

@Mic92 You mean avoid?

[Mic92]

@ShalokShalom yes. updated.