python27: add patch to fix CVE-2018-1000802

2018-11-02 02:09:41 +01:00 · 2018-11-02 02:09:41 +01:00 · ae3e9b5a27
commit ae3e9b5a27
parent 7863aae5b2
1 changed files with 6 additions and 0 deletions
--- a/pkgs/development/interpreters/python/cpython/2.7/default.nix
+++ b/pkgs/development/interpreters/python/cpython/2.7/default.nix
@ -74,6 +74,12 @@ let
        url = "file://${./type_getattro.patch}";
        sha256 = "11v9yx20hs3jmw0wggzvmw39qs4mxay4kb8iq2qjydwy9ya61nrd";
      })
+
+      (fetchpatch {
+        name = "CVE-2018-1000802.patch";
+        url = "https://github.com/python/cpython/pull/8985.patch";
+        sha256 = "1c8nq2c9sjqa8ipl62hiandg6a7lzrwwfhi3ky6jd3pxgyalrh97";
+      })
    ] ++ optionals (x11Support && stdenv.isDarwin) [
      ./use-correct-tcl-tk-on-darwin.patch
    ] ++ optionals stdenv.isLinux [