MirrorHub/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-17 23:36:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge pull request #176420 from dotlambda/nixops-insecure

Browse source 
nixops: mark insecure
This commit is contained in:
Robert Schütz 2022-06-06 19:19:50 -07:00 committed by GitHub
commit b1d10e8209
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
pkgs/development/python2-modules/pyjwt/default.nix
View file

@ -40,5 +40,8 @@ buildPythonPackage rec {
description = "JSON Web Token implementation in Python";
homepage = "https://github.com/jpadilla/pyjwt";
license = licenses.mit;
knownVulnerabilities = [
"CVE-2022-29217"
];
};
}

12
pkgs/tools/package-management/nixops/default.nix
View file

@ -6,6 +6,18 @@ let
inherit (poetry2nix.mkPoetryPackages {
projectDir = ./python-env;
python = python2;
overrides = [
poetry2nix.defaultPoetryOverrides
(self: super: {
pyjwt = super.pyjwt.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = lib.optionals (lib.versionOlder old.version "2.4.0") [
"CVE-2022-29217"
];
};
});
})
];
}) python;
pythonPackages = python.pkgs;