gnu: libgcrypt: Replace with 1.8.5 [fixes CVE-2019-13627].
* gnu/packages/gnupg.scm (libgcrypt-1.8.5): New variable. (libgcrypt)[replacement]: New field.
This commit is contained in:
		
							parent
							
								
									046915dead
								
							
						
					
					
						commit
						24496210ea
					
				
					 1 changed files with 14 additions and 1 deletions
				
			
		| 
						 | 
					@ -14,7 +14,7 @@
 | 
				
			||||||
;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
 | 
					;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
 | 
				
			||||||
;;; Copyright © 2017 Petter <petter@mykolab.ch>
 | 
					;;; Copyright © 2017 Petter <petter@mykolab.ch>
 | 
				
			||||||
;;; Copyright © 2018, 2019 Tobias Geerinckx-Rice <me@tobias.gr>
 | 
					;;; Copyright © 2018, 2019 Tobias Geerinckx-Rice <me@tobias.gr>
 | 
				
			||||||
;;; Copyright © 2018 Marius Bakke <mbakke@fastmail.com>
 | 
					;;; Copyright © 2018, 2019 Marius Bakke <mbakke@fastmail.com>
 | 
				
			||||||
;;; Copyright © 2018 Björn Höfling <bjoern.hoefling@bjoernhoefling.de>
 | 
					;;; Copyright © 2018 Björn Höfling <bjoern.hoefling@bjoernhoefling.de>
 | 
				
			||||||
;;;
 | 
					;;;
 | 
				
			||||||
;;; This file is part of GNU Guix.
 | 
					;;; This file is part of GNU Guix.
 | 
				
			||||||
| 
						 | 
					@ -111,6 +111,7 @@ Daemon and possibly more in the future.")
 | 
				
			||||||
  (package
 | 
					  (package
 | 
				
			||||||
    (name "libgcrypt")
 | 
					    (name "libgcrypt")
 | 
				
			||||||
    (version "1.8.4")
 | 
					    (version "1.8.4")
 | 
				
			||||||
 | 
					    (replacement libgcrypt-1.8.5)
 | 
				
			||||||
    (source (origin
 | 
					    (source (origin
 | 
				
			||||||
             (method url-fetch)
 | 
					             (method url-fetch)
 | 
				
			||||||
             (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
 | 
					             (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
 | 
				
			||||||
| 
						 | 
					@ -143,6 +144,18 @@ generation.")
 | 
				
			||||||
    (properties '((ftp-server . "ftp.gnupg.org")
 | 
					    (properties '((ftp-server . "ftp.gnupg.org")
 | 
				
			||||||
                  (ftp-directory . "/gcrypt/libgcrypt")))))
 | 
					                  (ftp-directory . "/gcrypt/libgcrypt")))))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					(define-public libgcrypt-1.8.5
 | 
				
			||||||
 | 
					  (package
 | 
				
			||||||
 | 
					    (inherit libgcrypt)
 | 
				
			||||||
 | 
					    (version "1.8.5")
 | 
				
			||||||
 | 
					    (source (origin
 | 
				
			||||||
 | 
					              (method url-fetch)
 | 
				
			||||||
 | 
					              (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
 | 
				
			||||||
 | 
					                                  version ".tar.bz2"))
 | 
				
			||||||
 | 
					              (sha256
 | 
				
			||||||
 | 
					               (base32
 | 
				
			||||||
 | 
					                "1hvsazms1bfd769q0ngl0r9g5i4m9mpz9jmvvrdzyzk3rfa2ljiv"))))))
 | 
				
			||||||
 | 
					
 | 
				
			||||||
(define-public libassuan
 | 
					(define-public libassuan
 | 
				
			||||||
  (package
 | 
					  (package
 | 
				
			||||||
    (name "libassuan")
 | 
					    (name "libassuan")
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Reference in a new issue