nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-09-29 19:30:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #203477 from dotlambda/CVE-2022-42966

Browse Source 
[22.11] python310Packages.cleo: fix CVE-2022-42966
This commit is contained in:
Robert Schütz
2022-11-29 07:30:02 -08:00
committed by GitHub
parent f4660951c7 19bc1f31d9
commit 731cc710ae
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkgs/development/python-modules/cleo/default.nix
View File

@@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchFromGitHub
, fetchpatch
, crashtest
, poetry-core
, pylev
@@ -20,6 +21,15 @@ buildPythonPackage rec {
hash = "sha256-FtGGIRF/tA2OWEjkCFwa1HHg6VY+5E5mAiJC/zjUC1g=";
};
patches = [
(fetchpatch {
name = "CVE-2022-42966.patch";
url = "https://github.com/python-poetry/cleo/commit/b5b9a04d2caf58bf7cf94eb7ae4a1ebbe60ea455.patch";
relative = "src";
hash = "sha256-nMmRipgQC/w4GIV+VHgKx1xmPm4j+4tR980sROmbfnM=";
})
];
postPatch = ''
substituteInPlace pyproject.toml \
--replace 'crashtest = "^0.3.1"' 'crashtest = "*"'