Merge pull request #303896 from risicle/ris-jwcrypto-CVE-2024-28102-r23.11

[23.11] python311Packages.jwcrypto: add patch for CVE-2024-28102
This commit is contained in:
Thomas Gerbet
2024-04-14 11:51:09 +02:00
committed by GitHub

View File

@@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchPypi
, fetchpatch
, cryptography
, deprecated
, pythonOlder
@@ -18,6 +19,14 @@ buildPythonPackage rec {
hash = "sha256-SLub9DN3cTYlNXnlK3X/4PmkpyHRM9AfRaC5HtX08a4=";
};
patches = [
(fetchpatch {
name = "CVE-2024-28102.patch";
url = "https://github.com/latchset/jwcrypto/commit/90477a3b6e73da69740e00b8161f53fea19b831f.patch";
hash = "sha256-0+zjHEXEcL1ZqRaxFi3lo9nAg+Ny/ERpNCclF+0SrYI=";
})
];
propagatedBuildInputs = [
cryptography
deprecated