From 217b8c2e061a5b637e198f1ed9960d4abe2b0a46 Mon Sep 17 00:00:00 2001 From: Marius Bakke Date: Sun, 15 Apr 2018 16:48:25 +0200 Subject: [PATCH] gnu: perl: Replace with 5.26.2 [fixes CVE-2018-{6797,6798,6913}]. * gnu/packages/perl.scm (perl-5.26.2): New public variable. (perl)[replacement]: New field. --- gnu/packages/perl.scm | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/gnu/packages/perl.scm b/gnu/packages/perl.scm index 50273d31e4..34eef565b1 100644 --- a/gnu/packages/perl.scm +++ b/gnu/packages/perl.scm @@ -13,7 +13,7 @@ ;;; Copyright © 2016 Ben Woodcroft ;;; Copyright © 2016 Jan Nieuwenhuizen ;;; Copyright © 2017 Raoul J.P. Bonnal -;;; Copyright © 2017 Marius Bakke +;;; Copyright © 2017, 2018 Marius Bakke ;;; Copyright © 2017 Adriano Peluso ;;; Copyright © 2017, 2018 Tobias Geerinckx-Rice ;;; Copyright © 2017 Leo Famulari @@ -59,6 +59,7 @@ (package (name "perl") (version "5.26.1") + (replacement perl-5.26.2) (source (origin (method url-fetch) (uri (string-append "mirror://cpan/src/5.0/perl-" @@ -155,6 +156,19 @@ (home-page "http://www.perl.org/") (license gpl1+))) ; or "Artistic" +;; Fixes CVE-2018-6797, CVE-2018-6798, and CVE-2018-6913. +;; See . +(define-public perl-5.26.2 + (package/inherit perl + (version "5.26.2") + (source (origin + (inherit (package-source perl)) + (uri (string-append "mirror://cpan/src/5.0/perl-" + version ".tar.gz")) + (sha256 + (base32 + "03gpnxx1g6hvlh0v4aqx00580h787sfywp1vlvw64q2xcbm9qbsp")))))) + (define-public perl-algorithm-c3 (package (name "perl-algorithm-c3")