mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-08-25 17:55:21 +00:00
pythonPackages.bottle: add patch for CVE-2020-28473
commit identification from https://github.com/bottlepy/bottle/issues/1331
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
{ stdenv, buildPythonPackage, fetchPypi, setuptools }:
|
||||
{ stdenv, buildPythonPackage, fetchPypi, fetchpatch, setuptools }:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "bottle";
|
||||
@@ -9,6 +9,14 @@ buildPythonPackage rec {
|
||||
sha256 = "0819b74b145a7def225c0e83b16a4d5711fde751cd92bae467a69efce720f69e";
|
||||
};
|
||||
|
||||
patches = [
|
||||
(fetchpatch {
|
||||
name = "CVE-2020-28473.patch";
|
||||
url = "https://github.com/bottlepy/bottle/commit/57a2f22e0c1d2b328c4f54bf75741d74f47f1a6b.patch";
|
||||
sha256 = "0jgvpmsq5zswr077ql5h4kmglqh7z1hf0w5gr8x59am0sgjcz21v";
|
||||
})
|
||||
];
|
||||
|
||||
propagatedBuildInputs = [ setuptools ];
|
||||
|
||||
meta = with stdenv.lib; {
|
||||
|
||||
Reference in New Issue
Block a user