Merge pull request #125567 from risicle/ris-python-websockets-CVE-2018-1000518-redux-r21.05

[21.05] python3Packages.websockets: add patch for CVE-2021-33880
This commit is contained in:
Robert Schütz 2021-06-16 13:27:50 +02:00 committed by GitHub
commit 5b79115614
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 0 deletions

View File

@ -1,5 +1,6 @@
{ lib
, fetchFromGitHub
, fetchpatch
, buildPythonPackage
, pythonOlder
, pytest
@ -17,6 +18,15 @@ buildPythonPackage rec {
sha256 = "05jbqcbjg50ydwl0fijhdlqcq7fl6v99kjva66kmmzzza7vwa872";
};
patches = [
(fetchpatch {
name = "CVE-2021-33880.patch";
url = "https://github.com/aaugustin/websockets/commit/547a26b685d08cac0aa64e5e65f7867ac0ea9bc0.patch";
excludes = [ "docs/changelog.rst" ];
sha256 = "1wgsvza53ga8ldrylb3rqc17yxcrchwsihbq6i6ldpycq83q5akq";
})
];
disabled = pythonOlder "3.3";
# Tests fail on Darwin with `OSError: AF_UNIX path too long`