diff options
| author | Robert Schütz <nix@dotlambda.de> | 2023-09-07 21:41:06 -0700 |
|---|---|---|
| committer | github-actions[bot] <github-actions[bot]@users.noreply.github.com> | 2023-09-08 09:54:12 +0000 |
| commit | c3b2606bd80b91d4992f41a4e5ae7df87bc60d7e (patch) | |
| tree | 6670ed89f038534feb98beee0b9d1d2635b25050 | |
| parent | Merge pull request #253853 from teutat3s/backport-1password-gui (diff) | |
| download | nixpkgs-origin/backport-253959-to-release-23.05.tar.gz | |
poetry2nix: mark poetry insecureorigin/backport-253959-to-release-23.05
(cherry picked from commit 7b6bc2521bc539c3a4ff479c0ec4ab902eee8594)
| -rw-r--r-- | pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix b/pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix index d175bfe01f30..b0423a98f9ec 100644 --- a/pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix +++ b/pkgs/development/tools/poetry2nix/poetry2nix/pkgs/poetry/default.nix @@ -49,6 +49,32 @@ poetry2nix.mkPoetryApplication { # Fails because of impurities (network, git etc etc) doCheck = false; + overrides = [ + poetry2nix.defaultPoetryOverrides + (self: super: { + cryptography = super.cryptography.overridePythonAttrs (old: { + meta = old.meta // { + knownVulnerabilities = old.meta.knownVulnerabilities or [ ] + ++ lib.optionals (lib.versionOlder old.version "41.0.0") [ + "CVE-2023-2650" + "CVE-2023-2975" + "CVE-2023-3446" + "CVE-2023-3817" + "CVE-2023-38325" + ]; + }; + }); + requests = super.requests.overridePythonAttrs (old: { + meta = old.meta // { + knownVulnerabilities = old.meta.knownVulnerabilities or [ ] + ++ lib.optionals (lib.versionOlder old.version "2.31.0") [ + "CVE-2023-32681" + ]; + }; + }); + }) + ]; + meta = with lib; { inherit (python.meta) platforms; maintainers = with maintainers; [ adisbladis jakewaksbaum ]; |