Unverified Commit b7d86c0c authored by Robert Schütz's avatar Robert Schütz Committed by GitHub
Browse files

Merge pull request #224434 from dotlambda/nixops_unstable-insecure

nixops_unstable: mark cryptography insecure
parents cc5bde40 f2bb0266
Loading
Loading
Loading
Loading
+18 −0
Original line number Diff line number Diff line
@@ -69,6 +69,24 @@ let
          };
        })

        (self: super: {
          cryptography = super.cryptography.overridePythonAttrs (old: {
            meta = old.meta // {
              knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
                ++ lib.optionals (lib.versionOlder old.version "39.0.1") [
                  "CVE-2022-4304"
                  "CVE-2023-0215"
                  "CVE-2023-0216"
                  "CVE-2023-0217"
                  "CVE-2023-0401"
                  "CVE-2022-4203"
                  "CVE-2022-4450"
                  "CVE-2023-23931"
                ];
            };
          });
        })

      ];
    }
  ).python;