From 5d16b24ed2c5bcb588c8cd1be0d5b02640083b8a Mon Sep 17 00:00:00 2001
From: Graham Christensen <graham@grahamc.com>
Date: Wed, 15 Mar 2017 17:36:10 -0400
Subject: [PATCH] Revert "JBoss AS: list known vulnerability"

This reverts commit 061bd1293b2f26bb7951f253582d66147395ef30.
---
 nixos/modules/services/web-servers/jboss/default.nix | 2 +-
 pkgs/servers/http/jboss/default.nix                  | 3 ---
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/nixos/modules/services/web-servers/jboss/default.nix b/nixos/modules/services/web-servers/jboss/default.nix
index d28724281a83..583fe56eb5e2 100644
--- a/nixos/modules/services/web-servers/jboss/default.nix
+++ b/nixos/modules/services/web-servers/jboss/default.nix
@@ -25,7 +25,7 @@ in
 
       enable = mkOption {
         default = false;
-        description = "Whether to enable JBoss. WARNING : this package is outdated and is known to have vulnerabilities.";
+        description = "Whether to enable jboss";
       };
 
       tempDir = mkOption {
diff --git a/pkgs/servers/http/jboss/default.nix b/pkgs/servers/http/jboss/default.nix
index 068053d71f09..2dd9d544a03b 100644
--- a/pkgs/servers/http/jboss/default.nix
+++ b/pkgs/servers/http/jboss/default.nix
@@ -22,8 +22,5 @@ stdenv.mkDerivation {
     license = licenses.lgpl21;
     maintainers = [ maintainers.sander ];
     platforms = platforms.unix;
-    knownVulnerabilities = [
-      "CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
-    ];
   };
 }