From 464cbda38611fa33e00c4994c4b50d74b2cf028c Mon Sep 17 00:00:00 2001 From: Stig Palmquist Date: Thu, 24 Jan 2019 23:16:31 +0100 Subject: [PATCH 1/2] pythonPackages.python-gnupg: 0.4.3 -> 0.4.4 Fixes CVE-2019-6690: https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability/ --- pkgs/development/python-modules/python-gnupg/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/python-gnupg/default.nix b/pkgs/development/python-modules/python-gnupg/default.nix index 86e58d489a6..8bba1dda99f 100644 --- a/pkgs/development/python-modules/python-gnupg/default.nix +++ b/pkgs/development/python-modules/python-gnupg/default.nix @@ -3,11 +3,11 @@ buildPythonPackage rec { name = "${pname}-${version}"; pname = "python-gnupg"; - version = "0.4.3"; + version = "0.4.4"; src = fetchPypi { inherit pname version; - sha256 = "2d158dfc6b54927752b945ebe57e6a0c45da27747fa3b9ae66eccc0d2147ac0d"; + sha256 = "45daf020b370bda13a1429c859fcdff0b766c0576844211446f9266cae97fb0e"; }; propagatedBuildInputs = [ gnupg1 ]; From 026ec75df522411cf963ba56d619d0072c645557 Mon Sep 17 00:00:00 2001 From: Stig Palmquist Date: Thu, 24 Jan 2019 23:18:00 +0100 Subject: [PATCH 2/2] pythonPackages.python-gnupg: remove name, remove propagatedBuildInputs --- pkgs/development/python-modules/python-gnupg/default.nix | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkgs/development/python-modules/python-gnupg/default.nix b/pkgs/development/python-modules/python-gnupg/default.nix index 8bba1dda99f..1ecf5fe1061 100644 --- a/pkgs/development/python-modules/python-gnupg/default.nix +++ b/pkgs/development/python-modules/python-gnupg/default.nix @@ -1,7 +1,6 @@ { stdenv, buildPythonPackage, fetchPypi, gnupg1 }: buildPythonPackage rec { - name = "${pname}-${version}"; pname = "python-gnupg"; version = "0.4.4"; @@ -10,8 +9,6 @@ buildPythonPackage rec { sha256 = "45daf020b370bda13a1429c859fcdff0b766c0576844211446f9266cae97fb0e"; }; - propagatedBuildInputs = [ gnupg1 ]; - # Let's make the library default to our gpg binary patchPhase = '' substituteInPlace gnupg.py \