nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-29 03:10:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

python3Packages.pip: add patches for CVE-2023-5752

Browse Source
This commit is contained in:
Robert Scott
2023-12-26 14:15:54 +00:00
parent e5d4c4eb32
commit 21fdfd15d0
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
pkgs/development/python-modules/pip/default.nix
View File

@@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchFromGitHub
, fetchpatch
, installShellFiles
, mock
, scripttest
@@ -29,6 +30,19 @@ buildPythonPackage rec {
hash = "sha256-mUlzfYmq1FE3X1/2o7sYJzMgwHRI4ib4EMhpg83VvrI=";
};
patches = [
(fetchpatch {
name = "CVE-2023-5752.part-1.patch";
url = "https://github.com/pypa/pip/commit/1082eb12622b20d101d2864111dd9a591dd6c2f5.patch";
hash = "sha256-aYdFaEmJW5kFTSz7w/05XhWW1gQSs+XgA3zdhsF3Xfg=";
})
(fetchpatch {
name = "CVE-2023-5752.part-2.patch";
url = "https://github.com/pypa/pip/commit/6dbd9c68f085c5bf304247bf7c7933842092efb2.patch";
hash = "sha256-CV4b52u7gD0XbTRxYSLrWBw4h/3iHzQ6Z768rbtIjrk=";
})
];
postPatch = ''
# Remove vendored Windows PE binaries
# Note: These are unused but make the package unreproducible.