b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Merge pull request #205342 from dotlambda/nixops-insecure

Browse source 
nixops: mark certifi insecure
This commit is contained in:
Robert Schütz 2022-12-11 13:08:08 -08:00 committed by GitHub
parent f9642cc689 218122fa5c
commit 823d4b7e8c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pkgs/applications/networking/cluster/nixops/default.nix
View file

@ -69,6 +69,14 @@ let
};
})
(self: super: {
certifi = super.certifi.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [ "CVE-2022-23491" ];
};
});
})
];
}
).python;

5
pkgs/tools/package-management/nixops/default.nix
View file

@ -9,6 +9,11 @@ let
overrides = [
poetry2nix.defaultPoetryOverrides
(self: super: {
certifi = super.certifi.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = [ "CVE-2022-23491" ];
};
});
pyjwt = super.pyjwt.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = lib.optionals (lib.versionOlder old.version "2.4.0") [