From 7825e0f1ef17ef704a13e2960280d41d2dc18cd3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 9 Dec 2022 10:01:53 -0800
Subject: [PATCH 1/2] nixops: mark certifi insecure

---
 pkgs/tools/package-management/nixops/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/tools/package-management/nixops/default.nix b/pkgs/tools/package-management/nixops/default.nix
index 21118870bfaf..4be57480afd3 100644
--- a/pkgs/tools/package-management/nixops/default.nix
+++ b/pkgs/tools/package-management/nixops/default.nix
@@ -9,6 +9,11 @@ let
     overrides = [
       poetry2nix.defaultPoetryOverrides
       (self: super: {
+        certifi = super.certifi.overridePythonAttrs (old: {
+          meta = old.meta // {
+            knownVulnerabilities = [ "CVE-2022-23491" ];
+          };
+        });
         pyjwt = super.pyjwt.overridePythonAttrs (old: {
           meta = old.meta // {
             knownVulnerabilities = lib.optionals (lib.versionOlder old.version "2.4.0") [

From 218122fa5c158ca244e842184dc894c6aba198ee Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Fri, 9 Dec 2022 10:04:57 -0800
Subject: [PATCH 2/2] nixopsUnstable: mark certifi insecure

---
 pkgs/applications/networking/cluster/nixops/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/applications/networking/cluster/nixops/default.nix b/pkgs/applications/networking/cluster/nixops/default.nix
index 1f08aad53e4e..e90ffbf20224 100644
--- a/pkgs/applications/networking/cluster/nixops/default.nix
+++ b/pkgs/applications/networking/cluster/nixops/default.nix
@@ -58,6 +58,14 @@ let
           };
         })
 
+        (self: super: {
+          certifi = super.certifi.overridePythonAttrs (old: {
+            meta = old.meta // {
+              knownVulnerabilities = [ "CVE-2022-23491" ];
+            };
+          });
+        })
+
       ];
     }
   ).python;