Merge pull request #224434 from dotlambda/nixops_unstable-insecure

nixops_unstable: mark cryptography insecure
This commit is contained in:
Robert Schütz 2023-04-04 17:18:32 -07:00 committed by GitHub
commit b7d86c0c36
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -69,6 +69,24 @@ let
};
})
(self: super: {
cryptography = super.cryptography.overridePythonAttrs (old: {
meta = old.meta // {
knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
++ lib.optionals (lib.versionOlder old.version "39.0.1") [
"CVE-2022-4304"
"CVE-2023-0215"
"CVE-2023-0216"
"CVE-2023-0217"
"CVE-2023-0401"
"CVE-2022-4203"
"CVE-2022-4450"
"CVE-2023-23931"
];
};
});
})
];
}
).python;