python3Packages.gevent: 22.10.2 -> 23.9.1

addressing CVE-2023-41419
This commit is contained in:
Robert Scott 2023-11-26 00:33:55 +00:00
parent f844210eab
commit faf7b4acbf

View File

@ -1,6 +1,5 @@
{ lib
, fetchPypi
, fetchpatch
, buildPythonPackage
, isPyPy
, python
@ -18,25 +17,16 @@
buildPythonPackage rec {
pname = "gevent";
version = "22.10.2";
version = "23.9.1";
format = "pyproject";
disabled = pythonOlder "3.7";
src = fetchPypi {
inherit pname version;
hash = "sha256-HKAdoXbuN7NSeicC99QNvJ/7jPx75aA7+k+e7EXlXEY=";
hash = "sha256-csACI1OQ1G+Uk4qWkg2IVtT/2d32KjA6DXwRiJQJfjQ=";
};
patches = [
# Replace deprecated pkg_resources with importlib-metadata
(fetchpatch {
url = "https://github.com/gevent/gevent/commit/bd96d8e14dc99f757de22ab4bb98439f912dab1e.patch";
hash = "sha256-Y+cxIScuEgAVYmmxBJ8OI+JuJ4G+iiROTcRdWglo3l0=";
includes = [ "src/gevent/events.py" ];
})
];
nativeBuildInputs = [
cython_3
setuptools