python2Packages.pip: mark insecure (#514922)

pkgs/development/misc/resholve/default.nix

@@ -33,8 +33,9 @@ let
     stripIdlelib = true;
     stripTests = true;
     enableOptimizations = false;
-    packageOverrides = prev: final: {
-      setuptools = removeKnownVulnerabilities final.setuptools;
+    packageOverrides = final: prev: {
+      pip = removeKnownVulnerabilities prev.pip;
+      setuptools = removeKnownVulnerabilities prev.setuptools;
     };
   };
   callPackage = lib.callPackageWith (pkgsBuildHost // { python27 = python27'; });

pkgs/development/python2-modules/pip/default.nix

@@ -40,6 +40,9 @@ buildPythonPackage rec {
     description = "PyPA recommended tool for installing Python packages";
     license = with lib.licenses; [ mit ];
     homepage = "https://pip.pypa.io/";
+    knownVulnerabilities = [
+      "CVE-2021-28363"
+    ];
     priority = 10;
   };
 }