Merge pull request #201859 from LibreCybernetics/mark-python2-unsecure
This commit is contained in:
commit
3a208b41ca
1 changed files with 9 additions and 3 deletions
|
@ -351,8 +351,14 @@ in with passthru; stdenv.mkDerivation ({
|
||||||
license = lib.licenses.psfl;
|
license = lib.licenses.psfl;
|
||||||
platforms = lib.platforms.all;
|
platforms = lib.platforms.all;
|
||||||
maintainers = with lib.maintainers; [ fridh thiagokokada ];
|
maintainers = with lib.maintainers; [ fridh thiagokokada ];
|
||||||
# Higher priority than Python 3.x so that `/bin/python` points to `/bin/python2`
|
knownVulnerabilities = [
|
||||||
# in case both 2 and 3 are installed.
|
"Python 2.7 has reached its end of life after 2020-01-01. See https://www.python.org/doc/sunset-python-2/."
|
||||||
priority = -100;
|
# Quote: That means that we will not improve it anymore after that day,
|
||||||
|
# even if someone finds a security problem in it. You should upgrade to
|
||||||
|
# Python 3 as soon as you can. [..] So, in 2008, we announced that we
|
||||||
|
# would sunset Python 2 in 2015, and asked people to upgrade before
|
||||||
|
# then. Some did, but many did not. So, in 2014, we extended that
|
||||||
|
# sunset till 2020.
|
||||||
|
];
|
||||||
};
|
};
|
||||||
} // crossCompileEnv)
|
} // crossCompileEnv)
|
||||||
|
|
Loading…
Reference in a new issue