From 1b1ffffdea91d6e53d2a7d26349fc38382715e2d Mon Sep 17 00:00:00 2001
From: Robert Scott <code@humanleg.org.uk>
Date: Thu, 11 Nov 2021 14:42:40 +0000
Subject: [PATCH] python3Packages.distributed: add patch for CVE-2021-42343

---
 .../python-modules/distributed/default.nix            | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pkgs/development/python-modules/distributed/default.nix b/pkgs/development/python-modules/distributed/default.nix
index 8ce554e6f6be..280a2fddc5a1 100644
--- a/pkgs/development/python-modules/distributed/default.nix
+++ b/pkgs/development/python-modules/distributed/default.nix
@@ -1,6 +1,7 @@
 { lib
 , buildPythonPackage
 , fetchPypi
+, fetchpatch
 , click
 , cloudpickle
 , dask
@@ -29,6 +30,16 @@ buildPythonPackage rec {
     sha256 = "sha256-Qn/n4Ee7rXQTxl1X5W+k1rHPkh/SBqPSyquUv5FTw9s=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-42343.patch";
+      url = "https://github.com/dask/distributed/commit/afce4be8e05fb180e50a9d9e38465f1a82295e1b.patch";
+      sha256 = "1rww36948lrffbg0r94lav0ki1v5vvqi7jfdflhlnb5dz0rnw686";
+      # conflicts and we don't run the tests at the moment anyway
+      excludes = [ "distributed/deploy/tests/*" ];
+    })
+  ];
+
   propagatedBuildInputs = [
       click cloudpickle dask msgpack psutil six
       sortedcontainers tblib toolz tornado zict pyyaml mpi4py bokeh