python3Packages.tornado_4: add patch for CVE-2023-28370

(cherry picked from commit cd6106c497)
This commit is contained in:
Robert Scott
2023-08-14 18:00:46 +01:00
parent 771b86d407
commit 0d8188fd5a

View File

@@ -2,6 +2,7 @@
, unittestCheckHook
, buildPythonPackage
, fetchPypi
, fetchpatch
, isPy27
, pythonAtLeast
}:
@@ -16,6 +17,14 @@ buildPythonPackage rec {
sha256 = "02jzd23l4r6fswmwxaica9ldlyc2p6q8dk6dyff7j58fmdzf853d";
};
patches = [
(fetchpatch {
name = "CVE-2023-28370.patch";
url = "https://github.com/tornadoweb/tornado/commit/32ad07c54e607839273b4e1819c347f5c8976b2f.patch";
hash = "sha256-2dpPHkNThOaZD8T2g1vb/I5WYZ/vy/t690539uprJyc=";
})
];
nativeCheckInputs = [ unittestCheckHook ];
# We specify the name of the test files to prevent