From 1f04d4be9154eebfc8b23bf3ff1cb3b69de99d10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <dev@schuetz-co.de>
Date: Sun, 7 Mar 2021 17:45:35 +0100
Subject: [PATCH] pythonPackages.pyyaml: patch CVE-2020-14343

Apply patch from https://github.com/yaml/pyyaml/pull/472.
---
 pkgs/development/python-modules/pyyaml/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/pkgs/development/python-modules/pyyaml/default.nix b/pkgs/development/python-modules/pyyaml/default.nix
index 95ceeab3a04b..bc5c389ce585 100644
--- a/pkgs/development/python-modules/pyyaml/default.nix
+++ b/pkgs/development/python-modules/pyyaml/default.nix
@@ -1,4 +1,4 @@
-{ lib, buildPythonPackage, fetchPypi, cython, libyaml, buildPackages }:
+{ lib, buildPythonPackage, fetchPypi, fetchpatch, cython, libyaml, buildPackages }:
 
 buildPythonPackage rec {
   pname = "PyYAML";
@@ -9,6 +9,14 @@ buildPythonPackage rec {
     sha256 = "0pb4zvkfxfijkpgd1b86xjsqql97ssf1knbd1v53wkg1qm9cgsmq";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2020-14343.patch";
+      url = "https://github.com/yaml/pyyaml/pull/472/commits/7adc0db3f613a82669f2b168edd98379b83adb3c.patch";
+      sha256 = "0802zjbp84c7bvja60cv9r9d36x143c62rl01mv35s32r5fids2n";
+    })
+  ];
+
   # force regeneration using Cython
   postPatch = ''
     rm ext/_yaml.c