libtensorflow: mark as broken and vulnerable

https://github.com/NixOS/nixpkgs/issues/250245
2023-08-20 21:33:25 +02:00
parent dab839357e
commit d121cf4135
1 changed files with 4 additions and 1 deletions
@@ -448,7 +448,10 @@ let
      license = licenses.asl20;
      maintainers = with maintainers; [ abbradar ];
      platforms = with platforms; linux ++ darwin;
-      broken = !(xlaSupport -> cudaSupport) || python.pythonVersion == "3.11";
+      # More vulnerabilities in 2.11.1 really; https://github.com/tensorflow/tensorflow/releases
+      knownVulnerabilities = [ "CVE-2023-33976" ];
+      broken = true || # most likely needs dealing with protobuf/abseil updates
+        !(xlaSupport -> cudaSupport) || python.pythonVersion == "3.11";
    } // lib.optionalAttrs stdenv.isDarwin {
      timeout = 86400; # 24 hours
      maxSilent = 14400; # 4h, double the default of 7200s