Commit Graph

97 Commits

Author SHA1 Message Date
Robert Schütz
d3b70b47e3 python2Packages.TurboCheetah: remove 2022-12-03 18:58:11 -08:00
Robert Schütz
1d3f70b5fb python2Packages.httpretty: remove 2022-12-03 18:57:20 -08:00
Robert Schütz
53013ae601 python2Packages.prettytable: remove 2022-12-03 18:57:20 -08:00
Robert Schütz
c99c95f795 python2Packages.mutagen: remove 2022-12-03 18:57:20 -08:00
Robert Schütz
2eb15da448 python2Packages.qpid-python: remove 2022-12-03 18:57:19 -08:00
Theodore Ni
4fc97dce3c python310Packages.cffi: patch closures to work on M1 machines
Trusts the libffi library inside of nixpkgs on Apple devices.

When Apple's fork of libffi is not detected, cffi assumes that libffi
uses a strategy for creating closures (i.e. callbacks) that is in
certain cases susceptible to a security exploit.

Based on some analysis I did:

  https://groups.google.com/g/python-cffi/c/xU0Usa8dvhk

I believe that libffi already contains the code from Apple's fork that
is deemed safe to trust in cffi.

It uses a more sophisticated strategy for creating trampolines to
support closures that works on Apple Silicon, while the simple approach
that cffi falls back on does not, so this patch enables code that uses
closures on M1 Macs again.

Notably, pyOpenSSL is impacted and will be fixed by this, reported in

  https://github.com/pyca/pyopenssl/issues/873

Note that libffi closures still will not work on signed apps without the
com.apple.security.cs.allow-unsigned-executable-memory entitlement while

  https://github.com/libffi/libffi/pull/621

is still open (which I haven't tested but is my best guess from reading).

I am hopeful that all of these changes will be upstreamed back into cffi
and libffi, and that this comment provides enough breadcrumbs for future
maintainers to track and clean this up.
2022-11-20 16:16:07 -08:00
Sandro
5ecf65eb6f Merge pull request #193680 from wegank/gimp-aarch64-darwin 2022-10-04 15:12:33 +02:00
Weijia Wang
7994937ed2 pygtk: fix build on aarch64-darwin 2022-10-04 13:42:41 +02:00
Weijia Wang
4ef739adf1 scandir: fix build on aarch64-darwin 2022-10-04 13:41:56 +02:00
Frederik Rietdijk
1d20d67783 python2Packages.pygtk: format should be other
because it doesn't use any of the hooks for building.
2022-09-16 19:36:05 +02:00
Frederik Rietdijk
161f8174b0 python2Packages.numpy: don't use setuptools hook
because we use the pip build phase already with pyproject.
2022-09-16 09:55:11 +02:00
Frederik Rietdijk
3eed54349f python2Packages.numpy: fix format and folder ests are run in 2022-09-15 16:38:31 +02:00
Winter
19adc3341c treewide: migrate to pythonPackages.unittestCheckHook 2022-08-13 14:09:43 -04:00
Sandro Jäckel
67dece3b2c python310Packages.attrs: 21.4.0 -> 22.1.0 2022-08-05 23:22:35 +02:00
ajs124
3f5b809a5f maintainers: remove sjourdois
no github account linked
2022-06-29 00:54:59 +02:00
Martin Weinelt
6451e9d4a5 Merge remote-tracking branch 'origin/staging-next' into staging 2022-06-08 22:22:26 +02:00
Robert Schütz
e5dcb4efd2 python2Packages.lpod: remove 2022-06-07 16:39:08 +00:00
Robert Schütz
f9c76fbaec python2Packages.libcloud: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
c769a56661 python2Packages.ipaddr: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
3367f6e4e6 python2Packages.wsproto: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
a9aba22cdc python2Packages.freezegun: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
2a54a83573 python2Packages.decorator: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
c1c1104596 python2Packages.cryptography: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
2f3c0f9a41 python2Packages.click: remove 2022-06-07 16:39:07 +00:00
Robert Schütz
8ceaa66b5a python2Packages.itsdangerous: remove 2022-06-07 16:39:06 +00:00
Robert Schütz
162b4c1006 python2Packages.werkzeug: remove 2022-06-07 16:39:06 +00:00
Robert Schütz
b566290cdb python2Packages.flask: remove 2022-06-07 16:39:06 +00:00
Robert Schütz
608ec38f08 python2Packages.pyjwt: remove 2022-06-07 16:39:03 +00:00
Robert Schütz
ed806bb627 python2Packages.urllib3: remove 2022-06-07 16:38:46 +00:00
Robert Schütz
93f430c156 python2Packages.vcrpy: remove 2022-06-07 16:38:21 +00:00
Robert Schütz
137d55460a python2Packages.wxPython: remove 2022-06-07 16:38:21 +00:00
Robert Schütz
d23be02c22 Merge pull request #176431 from dotlambda/urllib3-insecure
python2Packages.urllib3: mark insecure
2022-06-06 19:20:12 -07:00
Sandro Jäckel
d6252cb72c python27Packages.botocore: drop ordereddict 2022-06-06 11:46:14 -07:00
Robert Schütz
ac4fc73abc python2Packages.urllib3: mark insecure 2022-06-05 17:10:32 +00:00
Robert Schütz
007ffa6069 python2Packages.pyjwt: mark insecure 2022-06-05 17:07:25 +00:00
Sandro
537729541f Merge pull request #171640 from ilya-fedin/reduce-closure 2022-06-02 18:52:46 +02:00
Ilya Fedin
4165ae5392 pygtk: set outputs to reduce runtime closure 2022-05-13 21:01:08 +04:00
Sandro
7169abf52f python310Packages.babel: 2.9.1 -> 2.10.1 (#171867) 2022-05-09 01:53:28 +02:00
Martin Weinelt
bf1914e12a Merge remote-tracking branch 'origin/staging-next' into staging 2022-04-05 04:05:02 +02:00
Frederik Rietdijk
4f30fc6b4d python2.pkgs.pycairo: workaround to fix build 2022-04-04 20:39:08 +02:00
Sandro Jäckel
8df7949791 pythonPackages.cryptography-vectors: make internal to cryptography 2022-03-27 16:08:55 +02:00
revol-xut
ff845153ac python27Packages.gtkme: init at version 1.5.1 2022-02-25 14:00:45 +01:00
Dmitry Kalinkin
3087088c41 Merge branch 'staging-next' into staging
Conflicts:
	pkgs/top-level/aliases.nix
	pkgs/top-level/python-aliases.nix
2022-02-01 21:37:39 -05:00
piegames
724822a79d python2Packages.{pygtk,pyGtkGlade}: remove libglade support 2022-01-29 18:08:51 +01:00
Martin Weinelt
a17e0d7aa4 python2.pkgs.coverage: keep 5.5 2022-01-23 01:09:37 +01:00
Frederik Rietdijk
e42dd294e4 python2.pkgs.pyparsing: keep 2.4.7 2022-01-23 01:09:35 +01:00
Frederik Rietdijk
ae18d68b6b python2.pkgs: move expressions into python2-modules/ folder
Another step in further separating python2 from python3.
2022-01-16 10:00:16 +01:00