BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #253959 from dotlambda/poetry2nix-insecure

Browse source 
poetry2nix: mark poetry insecure
This commit is contained in:
adisbladis 2023-09-08 21:53:41 +12:00 committed by GitHub
commit 098c6db6dc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix
View file

@ -49,6 +49,32 @@ poetry2nix.mkPoetryApplication {
# Fails because of impurities (network, git etc etc)
doCheck = false;
overrides = [
poetry2nix.defaultPoetryOverrides
(self: super: {
cryptography = super.cryptography.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
++ lib.optionals (lib.versionOlder old.version "41.0.0") [
"CVE-2023-2650"
"CVE-2023-2975"
"CVE-2023-3446"
"CVE-2023-3817"
"CVE-2023-38325"
];
};
});
requests = super.requests.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
++ lib.optionals (lib.versionOlder old.version "2.31.0") [
"CVE-2023-32681"
];
};
});
})
];
meta = with lib; {
inherit (python.meta) platforms;
maintainers = with maintainers; [ adisbladis jakewaksbaum ];