me
/
guix
Archived
1
0
Fork 0
Code

gnu: nghttp2: Replace with version 1.41 [fixes CVE-2020-11080]. 

* gnu/packages/web.scm (nghttp2-1.41): New variable.
(nghttp2)[replacement]: New field.
master
Ludovic Courtès 2020-06-11 18:54:15 +02:00
parent 03a70e4c19
commit ecf92194a5
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
gnu/packages/web.scm
View File

@ -7193,6 +7193,7 @@ derivation by David Revoy from the original MonsterID by Andreas Gohr.")
(package (package
(name "nghttp2") (name "nghttp2")
(version "1.40.0") (version "1.40.0")
(replacement nghttp2-1.41)
(source (source
(origin (origin
(method url-fetch) (method url-fetch)
@ -7272,6 +7273,20 @@ compressed JSON header blocks.
@end itemize\n") @end itemize\n")
(license license:expat))) (license license:expat)))
(define-public nghttp2-1.41 ;fixes CVE-2020-11080
(package
(inherit nghttp2)
(version "1.41.0")
(source
(origin
(method url-fetch)
(uri (string-append "https://github.com/nghttp2/nghttp2/"
"releases/download/v" version "/"
"nghttp2-" version ".tar.xz"))
(sha256
(base32
"1hk77vngjmvvzb5y1gi1aqwf6qywrc7yak08zvzb7x81qs6mphmb"))))))
(define-public hpcguix-web (define-public hpcguix-web
(let ((commit "9de63562b06b4aef3a3afe5ecb18d3c91e57ee74") (let ((commit "9de63562b06b4aef3a3afe5ecb18d3c91e57ee74")
(revision "5")) (revision "5"))