python2Packages.urllib3: add patch for CVE-2021-28363

2021-03-28 16:20:58 +01:00 · 2021-03-28 16:20:58 +01:00 · e7d4edfe30
parent 8755cf4937
commit e7d4edfe30
1 changed files with 9 additions and 0 deletions
--- a/pkgs/development/python-modules/urllib3/2.nix
+++ b/pkgs/development/python-modules/urllib3/2.nix
@ -4,6 +4,7 @@
 , certifi
 , cryptography
 , dateutil
+, fetchpatch
 , fetchPypi
 , idna
 , mock
@ -26,6 +27,14 @@ buildPythonPackage rec {
    sha256 = "19188f96923873c92ccb987120ec4acaa12f0461fa9ce5d3d0772bc965a39e08";
  };

+  patches = [
+    (fetchpatch {
+      name = "CVE-2021-28363.patch";
+      url = "https://github.com/urllib3/urllib3/commit/8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0.patch";
+      sha256 = "1lqhrd11p03iv14bp89rh67ynf000swmwsfvr3jpfdycdqr3ka9q";
+    })
+  ];
+
  propagatedBuildInputs = [
    brotli
    certifi