Merge pull request #206160 from dotlambda/CVE-2022-4396

python310Packages.pyrdfa3: patch CVE-2022-4396
This commit is contained in:
Robert Schütz 2022-12-14 22:21:36 -08:00 committed by GitHub
commit f9920fe857
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchPypi
, fetchpatch
, isPy27
, rdflib
, html5lib
@ -17,6 +18,14 @@ buildPythonPackage rec {
sha256 = "sha256-FXZjqSuH3zRbb2m94jXf9feXiRYI4S/h5PqNrWhxMa4=";
};
patches = [
(fetchpatch {
name = "CVE-2022-4396.patch";
url = "https://github.com/RDFLib/pyrdfa3/commit/ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e.patch";
hash = "sha256-prRrOwylYcEqKLr/8LIpyJ5Yyt+6+HTUqH5sQXU8tqc=";
})
];
postPatch = ''
substituteInPlace setup.py \
--replace "'html = pyRdfa.rdflibparsers:StructuredDataParser'" "'html = pyRdfa.rdflibparsers:StructuredDataParser'," \