New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pybitmessage: 0.6.2 -> 0.6.3.2 #44510
Conversation
@dotlambda should this explicitly use python3 as well? |
|
||
src = fetchFromGitHub { | ||
owner = "bitmessage"; | ||
repo = "PyBitmessage"; | ||
rev = "v${version}"; | ||
sha256 = "04sgns9qczzw2152gqdr6bjyy4fmgs26cz8n3qck94l0j51rxhz8"; | ||
rev = "${version}"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
rev = version;
@@ -3,13 +3,13 @@ | |||
pythonPackages.buildPythonApplication rec { | |||
name = "pybitmessage-${version}"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Replace this line by pname = "pybitmessage";
.
No, PyBitmessage is python2 only: https://github.com/Bitmessage/PyBitmessage/blob/b0446ab4ab08def782b7f6fb6b7ca5c8d3d7f0c0/setup.py#L103 |
pybitmessage does not support python3 yet
@GrahamcOfBorg build pybitmessage |
Failure on x86_64-linux (full log) Attempted: pybitmessage Partial log (click to expand)
|
Failure on aarch64-linux (full log) Attempted: pybitmessage Partial log (click to expand)
|
Someone broke qt in the meantime :-/ |
It's not broken. We'll just have to wait until |
@GrahamcOfBorg build pybitmessage |
Success on x86_64-linux (full log) Attempted: pybitmessage Partial log (click to expand)
|
Backported in ad66494. |
Failure on aarch64-linux (full log) Attempted: pybitmessage Partial log (click to expand)
|
Motivation for this change
Fixes a RCE vulnerability
Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)/cc @jgillich