From b553e927d2857f1f5e5dee29bf6bc791e1104b1c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Wed, 29 Apr 2026 18:41:54 -0700
Subject: [PATCH 1/2] python2Packages.setuptools: mark insecure

---
 pkgs/development/python2-modules/setuptools/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/python2-modules/setuptools/default.nix b/pkgs/development/python2-modules/setuptools/default.nix
index e95e3bb82ef5..38aaf07f863e 100644
--- a/pkgs/development/python2-modules/setuptools/default.nix
+++ b/pkgs/development/python2-modules/setuptools/default.nix
@@ -82,6 +82,9 @@ buildPythonPackage {
       psfl
       zpl20
     ];
+    knownVulnerabilities = [
+      "CVE-2025-47273"
+    ];
     platforms = python.meta.platforms;
     priority = 10;
   };

From 3580fa1a7960a7086363b305a1127167a9c47ecd Mon Sep 17 00:00:00 2001
From: "Travis A. Everett" <travis.a.everett@gmail.com>
Date: Sun, 3 May 2026 13:54:17 -0500
Subject: [PATCH 2/2] resholve: adapt to marking of py2 setuptools CVE

---
 pkgs/development/misc/resholve/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/misc/resholve/default.nix b/pkgs/development/misc/resholve/default.nix
index d04350f44364..9f4f1bc85715 100644
--- a/pkgs/development/misc/resholve/default.nix
+++ b/pkgs/development/misc/resholve/default.nix
@@ -33,6 +33,9 @@ let
     stripIdlelib = true;
     stripTests = true;
     enableOptimizations = false;
+    packageOverrides = prev: final: {
+      setuptools = removeKnownVulnerabilities final.setuptools;
+    };
   };
   callPackage = lib.callPackageWith (pkgsBuildHost // { python27 = python27'; });
   source = callPackage ./source.nix { };