Patch python27 for CVE-2014-1912.

2014-04-11 11:31:50 -07:00
parent a3155a0e2a
commit 324ade4658
2 changed files with 61 additions and 0 deletions
--- a/pkgs/development/interpreters/python/2.7/default.nix
+++ b/pkgs/development/interpreters/python/2.7/default.nix
@@ -28,6 +28,10 @@ let
      # patch python to put zero timestamp into pyc
      # if DETERMINISTIC_BUILD env var is set
      ./deterministic-build.patch
+
+      # See http://bugs.python.org/issue20246
+      # This will be fixed in 2.7.7.
+      ./CVE-2014-1912.patch
    ];

  postPatch = stdenv.lib.optionalString (stdenv.gcc.libc != null) ''