Merge pull request #253954 from dotlambda/nixops_unstable-insecure
nixops_unstable: mark cryptography insecure
This commit is contained in:
commit
c52f7e84b4
@ -74,15 +74,12 @@ let
|
||||
cryptography = super.cryptography.overridePythonAttrs (old: {
|
||||
meta = old.meta // {
|
||||
knownVulnerabilities = old.meta.knownVulnerabilities or [ ]
|
||||
++ lib.optionals (lib.versionOlder old.version "39.0.1") [
|
||||
"CVE-2022-4304"
|
||||
"CVE-2023-0215"
|
||||
"CVE-2023-0216"
|
||||
"CVE-2023-0217"
|
||||
"CVE-2023-0401"
|
||||
"CVE-2022-4203"
|
||||
"CVE-2022-4450"
|
||||
"CVE-2023-23931"
|
||||
++ lib.optionals (lib.versionOlder old.version "41.0.0") [
|
||||
"CVE-2023-2650"
|
||||
"CVE-2023-2975"
|
||||
"CVE-2023-3446"
|
||||
"CVE-2023-3817"
|
||||
"CVE-2023-38325"
|
||||
];
|
||||
};
|
||||
});
|
||||
|
Loading…
Reference in New Issue
Block a user