diff options
| author | Pol Dellaiera <pol.dellaiera@protonmail.com> | 2024-08-22 10:48:19 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-08-22 10:48:19 +0200 |
| commit | 797f7dc49e0bc7fab4b57c021cdf68f595e47841 (patch) | |
| tree | fe60fe6585f3b84f2ee7fcbf10f02f02fc5c54ca | |
| parent | Merge #335406: netatalk: 3.1.18 -> 3.1.19 (diff) | |
| parent | python311Packages.djangorestframework: add patch for CVE-2024-21520 (diff) | |
| download | nixpkgs-797f7dc49e0bc7fab4b57c021cdf68f595e47841.tar.gz | |
Merge pull request #336399 from risicle/ris-djangorestframework-CVE-2024-21520-r24.05
[24.05] python311Packages.djangorestframework: add patch for CVE-2024-21520
| -rw-r--r-- | pkgs/development/python-modules/djangorestframework/default.nix | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/pkgs/development/python-modules/djangorestframework/default.nix b/pkgs/development/python-modules/djangorestframework/default.nix index 6b969183d46f..9f3849cedca1 100644 --- a/pkgs/development/python-modules/djangorestframework/default.nix +++ b/pkgs/development/python-modules/djangorestframework/default.nix @@ -2,6 +2,7 @@ lib, buildPythonPackage, fetchFromGitHub, + fetchpatch, coreapi, django, django-guardian, @@ -26,6 +27,14 @@ buildPythonPackage rec { hash = "sha256-Fnj0n3NS3SetOlwSmGkLE979vNJnYE6i6xwVBslpNz4="; }; + patches = [ + (fetchpatch { + name = "CVE-2024-21520.patch"; + url = "https://github.com/encode/django-rest-framework/commit/3b41f0124194430da957b119712978fa2266b642.patch"; + hash = "sha256-1NoRlV+sqHezDo28x38GD6DpcQuUF1q3YQXEb3SUvKQ="; + }) + ]; + propagatedBuildInputs = [ django pytz |