summary refs log tree commit diff
path: root/pkgs/applications/networking
diff options
context:
space:
mode:
authorRobert Schütz <nix@dotlambda.de>2023-04-04 17:18:32 -0700
committerGitHub <noreply@github.com>2023-04-04 17:18:32 -0700
commitb7d86c0c368b9246aed30f6c38c81a21fca9d722 (patch)
treec1f0c7bb92dc5855df77657ed177061953118f16 /pkgs/applications/networking
parentcc5bde408572508efd1273852862d418bb313443 (diff)
parentf2bb0266c1f14f077aed5659fa1f1ed3c386a74c (diff)
downloadnixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar.gz
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar.bz2
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar.lz
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar.xz
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.tar.zst
nixpkgs-b7d86c0c368b9246aed30f6c38c81a21fca9d722.zip
Merge pull request #224434 from dotlambda/nixops_unstable-insecure
nixops_unstable: mark cryptography insecure
Diffstat (limited to 'pkgs/applications/networking')
-rw-r--r--pkgs/applications/networking/cluster/nixops/default.nix18
1 files changed, 18 insertions, 0 deletions
diff --git a/pkgs/applications/networking/cluster/nixops/default.nix b/pkgs/applications/networking/cluster/nixops/default.nix
index cf306f858b6..581bfd90f41 100644
--- a/pkgs/applications/networking/cluster/nixops/default.nix
+++ b/pkgs/applications/networking/cluster/nixops/default.nix
@@ -69,6 +69,24 @@ let
           };
         })
 
+        (self: super: {
+          cryptography = super.cryptography.overridePythonAttrs (old: {
+            meta = old.meta // {
+              knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
+                ++ lib.optionals (lib.versionOlder old.version "39.0.1") [
+                  "CVE-2022-4304"
+                  "CVE-2023-0215"
+                  "CVE-2023-0216"
+                  "CVE-2023-0217"
+                  "CVE-2023-0401"
+                  "CVE-2022-4203"
+                  "CVE-2022-4450"
+                  "CVE-2023-23931"
+                ];
+            };
+          });
+        })
+
       ];
     }
   ).python;