python312: fix memory exhaustion vulnerability in asyncio.protocols (#362523)

2024-12-08 15:17:41 +01:00
parent ff1fd874b8 861d083530
commit 7c0647e562
2 changed files with 47 additions and 0 deletions
@@ -294,6 +294,8 @@ in with passthru; stdenv.mkDerivation (finalAttrs: {
  ] ++ optionals (pythonOlder "3.12") [
    # https://github.com/python/cpython/issues/90656
    ./loongarch-support.patch
+  ] ++ optionals (pythonAtLeast "3.12") [
+    ./3.12/CVE-2024-12254.patch
  ] ++ optionals (pythonAtLeast "3.11" && pythonOlder "3.13") [
    # backport fix for https://github.com/python/cpython/issues/95855
    ./platform-triplet-detection.patch