pythonPackages.suds: refactor move to python-modules

pkgs/development/python-modules/suds/default.nix

@@ -0,0 +1,29 @@
+{ stdenv
+, buildPythonPackage
+, fetchPypi
+, isPy3k
+}:
+
+buildPythonPackage rec {
+  pname = "suds";
+  version = "0.4";
+  disabled = isPy3k;
+
+  src = fetchPypi {
+    inherit pname version;
+    sha256 = "1w4s9051iv90c0gs73k80c3d51y2wbx1xgfdgg2hk7mv4gjlllnm";
+  };
+
+  patches = [ ./suds-0.4-CVE-2013-2217.patch ];
+
+  meta = with stdenv.lib; {
+    # Broken for security issues:
+    # - https://github.com/NixOS/nixpkgs/issues/19678
+    # - https://lwn.net/Vulnerabilities/559200/
+    broken = true;
+    description = "Lightweight SOAP client";
+    homepage = https://fedorahosted.org/suds;
+    license = licenses.lgpl3Plus;
+  };
+
+}

pkgs/development/python-modules/suds/suds-0.4-CVE-2013-2217.patch

@@ -0,0 +1,19 @@
+--- suds.orig/suds/cache.py	2013-06-29 16:26:16.930326017 +0200
++++ suds.orig/suds/cache.py	2013-06-29 16:02:15.000000000 +0200
+@@ -19,6 +19,7 @@ 
+ """
+ 
+ import os
++import tempfile
+ import suds
+ from tempfile import gettempdir as tmp
+ from suds.transport import *
+@@ -138,7 +139,7 @@ 
+         @type duration: {unit:value}
+         """
+         if location is None:
+-            location = os.path.join(tmp(), 'suds')
++            location = tempfile.mkdtemp()
+         self.location = location
+         self.duration = (None, 0)
+         self.setduration(**duration)