From 3cf6501aaaff2926de82f5fea3b3bec8d2af8780 Mon Sep 17 00:00:00 2001
From: Symphorien Gibol <symphorien+git@xlumurb.eu>
Date: Sun, 19 Jul 2020 12:00:00 +0000
Subject: [PATCH 1/2] python3.pkgs.ihatemoney: 4.1 -> 4.1.4

---
 .../development/python-modules/ihatemoney/default.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/ihatemoney/default.nix b/pkgs/development/python-modules/ihatemoney/default.nix
index 5df5e6b18cd20d..102ab10421cb94 100644
--- a/pkgs/development/python-modules/ihatemoney/default.nix
+++ b/pkgs/development/python-modules/ihatemoney/default.nix
@@ -33,15 +33,22 @@
 
 buildPythonPackage rec {
   pname = "ihatemoney";
-  version = "4.1";
+  version = "4.1.4";
 
   src = fetchFromGitHub {
     owner = "spiral-project";
     repo = pname;
     rev = version;
-    sha256 = "1ai7v2i2rvswzv21nwyq51fvp8lr2x2cl3n34p11br06kc1pcmin";
+    sha256 = "1k9pgjvhvmr9wh15zrsxi14cg1fvj41lz2pq9lm03crlxv0frbcm";
   };
 
+  postPatch = ''
+    # remove patch release level pinning
+    sed -i 's/==\([0-9]*\.[0-9]*\).*"/~=\1"/' setup.py
+    # https://github.com/spiral-project/ihatemoney/issues/567
+    sed -i 's/WTForms~=2.2/WTForms>=2.1,<2.3/' setup.py
+  '';
+
   propagatedBuildInputs = [
     alembic
     aniso8601

From 0c36b32c11047a5a4ccf0e9fab3c6dfbb2f9d2c3 Mon Sep 17 00:00:00 2001
From: Symphorien Gibol <symphorien+git@xlumurb.eu>
Date: Sun, 26 Jul 2020 12:00:00 +0000
Subject: [PATCH 2/2] python3Packages.ihatemoney: 4.1.4 -> 4.1.5

fixes CVE-2020-15120
---
 pkgs/development/python-modules/ihatemoney/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/ihatemoney/default.nix b/pkgs/development/python-modules/ihatemoney/default.nix
index 102ab10421cb94..93439e48953844 100644
--- a/pkgs/development/python-modules/ihatemoney/default.nix
+++ b/pkgs/development/python-modules/ihatemoney/default.nix
@@ -33,13 +33,13 @@
 
 buildPythonPackage rec {
   pname = "ihatemoney";
-  version = "4.1.4";
+  version = "4.1.5";
 
   src = fetchFromGitHub {
     owner = "spiral-project";
     repo = pname;
     rev = version;
-    sha256 = "1k9pgjvhvmr9wh15zrsxi14cg1fvj41lz2pq9lm03crlxv0frbcm";
+    sha256 = "07lkc0rhj6f4fka4m1vimycjxa452d8wlclknviqz2566gnb998n";
   };
 
   postPatch = ''