Merge pull request #95518 from risicle/ris-asyncpg-CVE-2020-17446-r20.03

[r20.03] pythonPackages.asyncpg: add patch for CVE-2020-17446
luigy · Aug 16, 2020 · 9319284 · 9319284
2 parents f8a10a7 + 24e7620
commit 9319284
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pkgs/development/python-modules/asyncpg/default.nix b/pkgs/development/python-modules/asyncpg/default.nix
@@ -11,6 +11,14 @@ buildPythonPackage rec {
     sha256 = "1c4mcjrdbvvq5crrfc3b9m221qb6pxp55yynijihgfnvvndz2jrr";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2020-17446.patch";
+      url = "https://github.com/MagicStack/asyncpg/commit/69bcdf5bf7696b98ee708be5408fd7d854e910d0.patch";
+      sha256 = "0br5bfzrlhwq7kqmnlgnjlizyyaq31mvgw77p3lwhxn5r0wkpnaj";
+    })
+  ];
+
   checkInputs = [
     uvloop
     postgresql