Merge pull request #145499 from risicle/ris-distributed-CVE-2021-42343-r21.05

This commit is contained in:
Martin Weinelt
2021-11-13 23:56:33 +01:00
committed by GitHub

View File

@@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchPypi
, fetchpatch
, click
, cloudpickle
, dask
@@ -29,6 +30,16 @@ buildPythonPackage rec {
sha256 = "sha256-Qn/n4Ee7rXQTxl1X5W+k1rHPkh/SBqPSyquUv5FTw9s=";
};
patches = [
(fetchpatch {
name = "CVE-2021-42343.patch";
url = "https://github.com/dask/distributed/commit/afce4be8e05fb180e50a9d9e38465f1a82295e1b.patch";
sha256 = "1rww36948lrffbg0r94lav0ki1v5vvqi7jfdflhlnb5dz0rnw686";
# conflicts and we don't run the tests at the moment anyway
excludes = [ "distributed/deploy/tests/*" ];
})
];
propagatedBuildInputs = [
click cloudpickle dask msgpack psutil six
sortedcontainers tblib toolz tornado zict pyyaml mpi4py bokeh