Merge pull request #198332 from dotlambda/CVE-2021-29063

python310Packages.mpmath: fix CVE-2021-29063
This commit is contained in:
Robert Scott 2022-11-09 00:54:19 +00:00 committed by GitHub
commit 6222a96a71
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,7 +1,9 @@
{ lib
, buildPythonPackage
, fetchPypi
, fetchpatch
, setuptools-scm
, pytestCheckHook
}:
buildPythonPackage rec {
@ -13,12 +15,21 @@ buildPythonPackage rec {
sha256 = "79ffb45cf9f4b101a807595bcb3e72e0396202e0b1d25d689134b48c4216a81a";
};
patches = [
(fetchpatch {
name = "CVE-2021-29063.patch";
url = "https://github.com/fredrik-johansson/mpmath/commit/46d44c3c8f3244017fe1eb102d564eb4ab8ef750.patch";
hash = "sha256-DaZ6nj9rEsjTAomu481Ujun364bL5E6lkXFvgBfHyeA=";
})
];
nativeBuildInputs = [
setuptools-scm
];
# error: invalid command 'test'
doCheck = false;
checkInputs = [
pytestCheckHook
];
meta = with lib; {
homepage = "https://mpmath.org/";