From cfa3b35bc334a8aabf01c349995235ff100aae13 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sun, 24 Jul 2022 20:19:33 +0100 Subject: [PATCH] python3Packages.ujson: add patch for CVE-2022-31117 --- pkgs/development/python-modules/ujson/default.nix | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/pkgs/development/python-modules/ujson/default.nix b/pkgs/development/python-modules/ujson/default.nix index 987347c86951..4becc946035f 100644 --- a/pkgs/development/python-modules/ujson/default.nix +++ b/pkgs/development/python-modules/ujson/default.nix @@ -5,6 +5,7 @@ , pytestCheckHook , pythonOlder , setuptools-scm +, fetchpatch }: buildPythonPackage rec { @@ -17,6 +18,14 @@ buildPythonPackage rec { sha256 = "a88944d2f99db71a3ca0c63d81f37e55b660edde0b07216fb65a3e46403ef004"; }; + patches = [ + (fetchpatch { + name = "CVE-2022-31117.patch"; + url = "https://github.com/ultrajson/ultrajson/commit/b21da40ead640b6153783dad506e68b4024056ef.patch"; + sha256 = "sha256-H8cxJ54ESZqtvJzC1W7Dl7WmdApxhLeSllsQW3uG1yc="; + }) + ]; + nativeBuildInputs = [ setuptools-scm ];