Merge pull request #224436 from dotlambda/tensorflow-insecure (adb2e5a6) · Commits · nix / nixpkgs

pkgs/development/python-modules/tensorflow/bin.nix

+21 −0

Original line number	Diff line number	Diff line
		@@ -201,5 +201,26 @@ in buildPythonPackage {
		license = licenses.asl20;
		maintainers = with maintainers; [ jyp abbradar cdepillabout ];
		platforms = [ "x86_64-linux" "x86_64-darwin" ];
		knownVulnerabilities = optionals (versionOlder packages.version "2.12.0") [
		"CVE-2023-27579"
		"CVE-2023-25801"
		"CVE-2023-25676"
		"CVE-2023-25675"
		"CVE-2023-25674"
		"CVE-2023-25673"
		"CVE-2023-25671"
		"CVE-2023-25670"
		"CVE-2023-25669"
		"CVE-2023-25668"
		"CVE-2023-25667"
		"CVE-2023-25665"
		"CVE-2023-25666"
		"CVE-2023-25664"
		"CVE-2023-25663"
		"CVE-2023-25662"
		"CVE-2023-25660"
		"CVE-2023-25659"
		"CVE-2023-25658"
		];
		};
		}

+21 −0

Original line number	Diff line number	Diff line
		@@ -448,6 +448,27 @@ let
		maintainers = with maintainers; [ abbradar ];
		platforms = with platforms; linux ++ darwin;
		broken = !(xlaSupport -> cudaSupport);
		knownVulnerabilities = [
		"CVE-2023-27579"
		"CVE-2023-25801"
		"CVE-2023-25676"
		"CVE-2023-25675"
		"CVE-2023-25674"
		"CVE-2023-25673"
		"CVE-2023-25671"
		"CVE-2023-25670"
		"CVE-2023-25669"
		"CVE-2023-25668"
		"CVE-2023-25667"
		"CVE-2023-25665"
		"CVE-2023-25666"
		"CVE-2023-25664"
		"CVE-2023-25663"
		"CVE-2023-25662"
		"CVE-2023-25660"
		"CVE-2023-25659"
		"CVE-2023-25658"
		];
		} // lib.optionalAttrs stdenv.isDarwin {
		timeout = 86400; # 24 hours
		maxSilent = 14400; # 4h, double the default of 7200s