Merge pull request #243267 from dotlambda/irrd-insecure

[23.05] irrd: mark insecure
This commit is contained in:
Robert Schütz
2023-07-20 12:08:34 -07:00
committed by GitHub

View File

@@ -33,6 +33,66 @@ let
];
});
hiredis = super.hiredis.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2021-32765"
];
};
});
pydantic = super.pydantic.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2020-10735"
];
};
});
redis = super.redis.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2023-28858"
"CVE-2023-28859"
];
};
});
requests = super.requests.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2023-32681"
];
};
});
sqlalchemy = super.sqlalchemy.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"PVE-2022-51668"
];
};
});
starlette = super.starlette.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2023-29159"
"CVE-2023-30798"
];
};
});
ujson = super.ujson.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [
"CVE-2021-45958"
"CVE-2022-31116"
"CVE-2022-31117"
];
};
});
})
];
}).python.pkgs;