movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-10 03:23:29 +03:00
Code Issues Projects Releases Packages Wiki Activity

python314: address CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

Browse source 
https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

https://www.cve.org/CVERecord?id=CVE-2025-4517
https://www.cve.org/CVERecord?id=CVE-2025-4330
https://www.cve.org/CVERecord?id=CVE-2025-4138
https://www.cve.org/CVERecord?id=CVE-2024-12718
https://www.cve.org/CVERecord?id=CVE-2025-4435
(cherry picked from commit 94552b6dbd)
This commit is contained in:
natsukium 2025-06-04 03:48:12 +09:00 • committed by github-actions[bot]
parent 4924364b26
commit 37030a18b2
2 changed files with 2058 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2055
pkgs/development/interpreters/python/cpython/3.14/CVE-2025-4517.patch Normal file
View file

File diff suppressed because it is too large Load diff

3
pkgs/development/interpreters/python/cpython/default.nix
View file

@ -339,6 +339,9 @@ stdenv.mkDerivation (finalAttrs: {
++ optionals (pythonAtLeast "3.13") [ ++ optionals (pythonAtLeast "3.13") [
./3.13/virtualenv-permissions.patch ./3.13/virtualenv-permissions.patch
] ]
++ optionals (pythonAtLeast "3.14") [
./3.14/CVE-2025-4517.patch
]
++ optionals mimetypesSupport [ ++ optionals mimetypesSupport [
# Make the mimetypes module refer to the right file # Make the mimetypes module refer to the right file
./mimetypes.patch ./mimetypes.patch