Unverified Commit a710c3b7 authored by dotlambda's avatar dotlambda Committed by GitHub
Browse files

python2Packages.pip: mark insecure (#514922)

parents 04b6aa55 e4f7a5a4

pkgs/development/misc/resholve/default.nix

+3 −2
Original line number Diff line number Diff line
@@ -33,8 +33,9 @@ let 
    stripIdlelib = true;

    stripTests = true;

    enableOptimizations = false;

    packageOverrides = prev: final: {

      setuptools = removeKnownVulnerabilities final.setuptools;

    packageOverrides = final: prev: {

      pip = removeKnownVulnerabilities prev.pip;

      setuptools = removeKnownVulnerabilities prev.setuptools;

    };

  };

  callPackage = lib.callPackageWith (pkgsBuildHost // { python27 = python27'; });

pkgs/development/python2-modules/pip/default.nix

+3 −0
Original line number Diff line number Diff line
@@ -40,6 +40,9 @@ buildPythonPackage rec { 
    description = "PyPA recommended tool for installing Python packages";

    license = with lib.licenses; [ mit ];

    homepage = "https://pip.pypa.io/";

    knownVulnerabilities = [

      "CVE-2021-28363"

    ];

    priority = 10;

  };

}