From d121cf41354d58a2f814cc807d922ff8ceea6f0c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= Date: Sun, 20 Aug 2023 21:33:25 +0200 Subject: [PATCH] libtensorflow: mark as broken and vulnerable https://github.com/NixOS/nixpkgs/issues/250245 --- pkgs/development/python-modules/tensorflow/default.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkgs/development/python-modules/tensorflow/default.nix b/pkgs/development/python-modules/tensorflow/default.nix index 8d16f6921d2f..348f5197a9d6 100644 --- a/pkgs/development/python-modules/tensorflow/default.nix +++ b/pkgs/development/python-modules/tensorflow/default.nix @@ -448,7 +448,10 @@ let license = licenses.asl20; maintainers = with maintainers; [ abbradar ]; platforms = with platforms; linux ++ darwin; - broken = !(xlaSupport -> cudaSupport) || python.pythonVersion == "3.11"; + # More vulnerabilities in 2.11.1 really; https://github.com/tensorflow/tensorflow/releases + knownVulnerabilities = [ "CVE-2023-33976" ]; + broken = true || # most likely needs dealing with protobuf/abseil updates + !(xlaSupport -> cudaSupport) || python.pythonVersion == "3.11"; } // lib.optionalAttrs stdenv.isDarwin { timeout = 86400; # 24 hours maxSilent = 14400; # 4h, double the default of 7200s