nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-02 13:00:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

pythonPackages.pyyaml: patch CVE-2020-14343

Browse Source 
Apply patch from https://github.com/yaml/pyyaml/pull/472.
This commit is contained in:
Robert Schütz
2021-03-07 17:45:35 +01:00
parent 39c4c971cd
commit 1f04d4be91
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/development/python-modules/pyyaml/default.nix
View File

@@ -1,4 +1,4 @@
{ lib, buildPythonPackage, fetchPypi, cython, libyaml, buildPackages }:
{ lib, buildPythonPackage, fetchPypi, fetchpatch, cython, libyaml, buildPackages }:
buildPythonPackage rec {
pname = "PyYAML";
@@ -9,6 +9,14 @@ buildPythonPackage rec {
sha256 = "0pb4zvkfxfijkpgd1b86xjsqql97ssf1knbd1v53wkg1qm9cgsmq";
};
patches = [
(fetchpatch {
name = "CVE-2020-14343.patch";
url = "https://github.com/yaml/pyyaml/pull/472/commits/7adc0db3f613a82669f2b168edd98379b83adb3c.patch";
sha256 = "0802zjbp84c7bvja60cv9r9d36x143c62rl01mv35s32r5fids2n";
})
];
# force regeneration using Cython
postPatch = ''
rm ext/_yaml.c