1
Fork 0
mirror of https://https.git.savannah.gnu.org/git/guix.git/ synced 2025-07-17 04:20:44 +02:00

gnu: Python: Fix CVE-2021-3177.

* gnu/packages/patches/python-3.8-CVE-2021-3177.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/python.scm (python-3.8)[replacement]: New field.
(python-3.8/fixed): New variable.
This commit is contained in:
Leo Famulari 2021-02-19 18:09:57 -05:00
parent c60ab40630
commit 84e082e317
No known key found for this signature in database
GPG key ID: 2646FA30BACA7F08
3 changed files with 204 additions and 0 deletions

View file

@ -364,6 +364,7 @@ data types.")
(define-public python-3.8
(package (inherit python-2)
(name "python")
(replacement python-3.8/fixed)
(version "3.8.2")
(source (origin
(method url-fetch)
@ -521,6 +522,14 @@ data types.")
(version-major+minor version)
"/site-packages"))))))))
(define python-3.8/fixed
(package
(inherit python-3.8)
(source (origin
(inherit (package-source python-3.8))
(patches (append (search-patches "python-3.8-CVE-2021-3177.patch")
(origin-patches (package-source python-3.8))))))))
(define-public python-3.9
(package (inherit python-3.8)
(name "python-next")