21b3b75515
gnu: glib: Fix CVE-2021-27218 and CVE-2021-27219.
...
* gnu/packages/patches/glib-CVE-2021-27218.patch,
gnu/packages/patches/glib-CVE-2021-27219-01.patch,
gnu/packages/patches/glib-CVE-2021-27219-02.patch,
gnu/packages/patches/glib-CVE-2021-27219-03.patch,
gnu/packages/patches/glib-CVE-2021-27219-04.patch,
gnu/packages/patches/glib-CVE-2021-27219-05.patch,
gnu/packages/patches/glib-CVE-2021-27219-06.patch,
gnu/packages/patches/glib-CVE-2021-27219-07.patch,
gnu/packages/patches/glib-CVE-2021-27219-08.patch,
gnu/packages/patches/glib-CVE-2021-27219-09.patch,
gnu/packages/patches/glib-CVE-2021-27219-10.patch,
gnu/packages/patches/glib-CVE-2021-27219-11.patch,
gnu/packages/patches/glib-CVE-2021-27219-12.patch,
gnu/packages/patches/glib-CVE-2021-27219-13.patch,
gnu/packages/patches/glib-CVE-2021-27219-14.patch,
gnu/packages/patches/glib-CVE-2021-27219-15.patch,
gnu/packages/patches/glib-CVE-2021-27219-16.patch,
gnu/packages/patches/glib-CVE-2021-27219-17.patch,
gnu/packages/patches/glib-CVE-2021-27219-18.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/glib.scm (glib)[replacement]: New field.
(glib/fixed): New variable.
2021-03-11 06:21:13 -05:00
500189b4d2
gnu: go: Update to 1.14.15 [security fixes].
...
This update will cause more than 300 packages to be rebuilt but due to how Go
works we can't graft to fix the issue since we actually need to rebuild
dependents so they include a newer version of the Go standard
library. Considering the CVEs that this fixes are in great part in the Go
standard library we can only proceed and push directly to master.
* gnu/packages/golang.scm (go): Update to 1.14.15.
[arguments]: Remove more cgo-related failing tests.
2021-03-11 11:02:23 +01:00
fd2751f89f
gnu: emacs-password-store: 2.1.4-1.918992c [security fix].
...
Includes a fix to no longer store clear passwords in a temporary file, see
commit 7aa17d099577730d2d65332896b74d5865b22abf for details.
* gnu/packages/emacs-xyz.scm (emacs-password-store): Update to
2.1.4-1.918992c.
[propagated-inputs]: Remove emacs-f, add emacs-auth-source-pass.
2021-03-11 09:54:44 +00:00
4a8b529ce1
gnu: openssl: Update to 1.1.1j [security fixes].
...
* gnu/packages/tls.scm (openssl/fixed): New variable.
(openssl)[replacement]: Graft.
2021-03-11 05:38:57 +01:00
ee8e4ba7aa
gnu: openvpn: Update to 2.5.1 [security fixes].
...
Non-exhaustively, fixes CVE-2020-7224.
* gnu/packages/vpn.scm (openvpn): Update to 2.5.1.
2021-03-11 05:31:54 +01:00
826428ab5b
gnu: libx11: Update to 1.6.12 [fixes CVE-2020-14363].
...
* gnu/packages/xorg.scm (libx11/fixed): New variable.
(libx11)[replacement]: Graft.
2021-03-11 05:25:43 +01:00
9d74b66de7
gnu: docker-cli: Fix source hash.
...
This is a follow-up to commit 83cda00bc6
2021-03-11 04:36:22 +01:00
46a7f82882
gnu: gnome-autoar: Update to 0.3.0 [fixes CVE-2020-36241].
...
* gnu/packages/gnome.scm (gnome-autoar): Update to 0.3.0.
2021-03-11 04:00:50 +01:00
2bcfb944bd
gnu: zstd-1.4.9: Fix i686-linux and arm/aarch64-linux builds.
...
It's only a graft added for security so disabling tests on there seems
acceptable.
See: <https://lists.gnu.org/archive/html/guix-devel/2021-03/msg00130.html >.
* gnu/packages/compression.scm (zstd-1.4.9)[arguments]: Substitute keyword
arguments of 'zstd' to disable tests.
2021-03-11 02:58:28 +01:00
1acfda2f94
gnu: geary: Fix CVE-2020-24661.
...
* gnu/packages/patches/geary-CVE-2020-24661.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/gnome.scm (geary): Apply it.
2021-03-11 02:32:19 +01:00
be31314638
gnu: gthumb: Update to 3.10.2 [security fixes].
...
Non-exhaustively, fixes CVE-2019-20326.
* gnu/packages/gnome.scm (gthumb): Update to 3.10.2.
2021-03-11 02:19:53 +01:00
e940f6d801
gnu: libcroco: Fix CVE-2020-12825.
...
* gnu/packages/patches/libcroco-CVE-2020-12825.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/gnome.scm (libcroco/fixed): New variable. Apply patch.
(libcroco)[replacement]: Graft.
2021-03-11 02:02:24 +01:00
a2943e36c7
gnu: evolution: Fix CVE-2020-11879.
...
* gnu/packages/patches/evolution-CVE-2020-11879.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/gnome.scm (evolution): Apply it.
2021-03-11 01:19:40 +01:00
c35f87bb1a
gnu: evolution-data-server: Fix CVE-2020-14928 and CVE-2020-16117.
...
* gnu/packages/patches/evolution-data-server-CVE-2020-14928.patch,
gnu/packages/patches/evolution-data-server-CVE-2020-16117.patch: New patches.
* gnu/local.mk (dist_patch_DATA): Register them.
* gnu/packages/gnome.scm (evolution-data-server): Apply them.
2021-03-11 01:19:40 +01:00
24f0bb21ab
gnu: qca: Update to 2.3.2.
...
* gnu/packages/kde.scm (qca): Update to 2.3.2.
2021-03-11 00:46:02 +01:00
4c144b27d8
gnu: sooperlooper: Update to 1.7.6.
...
* gnu/packages/music.scm (sooperlooper): Update to 1.7.6.
2021-03-11 00:46:02 +01:00
f4618b13d8
gnu: bindfs: Update to 1.15.1.
...
* gnu/packages/file-systems.scm (bindfs): Update to 1.15.1.
2021-03-11 00:46:02 +01:00
5929668ee8
gnu: weechat: Update to 3.1.
...
* gnu/packages/irc.scm (weechat): Update to 3.1.
2021-03-11 00:46:01 +01:00
6900105334
gnu: os-prober: Update to 1.78.
...
* gnu/packages/bootloaders.scm (os-prober): Update to 1.78.
2021-03-11 00:46:01 +01:00
a3926c8227
gnu: mutt: Update to 2.0.6.
...
* gnu/packages/mail.scm (mutt): Update to 2.0.6.
2021-03-11 00:46:01 +01:00
6eea92e38b
gnu: librecad: Update to 2.2.0-rc2 [fixes CVE-2018-19105].
...
* gnu/packages/engineering.scm (librecad): Update to 2.2.0-rc2.
2021-03-10 23:58:02 +01:00
a70216c327
gnu: monolith: Update to 2.4.1.
...
* gnu/packages/web.scm (monolith): Update to 2.4.1.
2021-03-10 23:49:59 +01:00
b1e4be8fea
gnu: Add rust-cssparser-0.28.
...
* gnu/packages/crates-io.scm (rust-cssparser-0.28): New variable.
(rust-cssparser-0.27): Inherit from above.
2021-03-10 23:49:59 +01:00
59e0c9a439
gnu: Add rust-reqwest-0.11.
...
* gnu/packages/crates-io.scm (rust-reqwest-0.11): New variable.
(rust-reqwest-0.10): Inherit from above.
2021-03-10 23:49:58 +01:00
0f0451c6cb
gnu: Add rust-tokio-util-0.4.
...
* gnu/packages/crates-io.scm (rust-tokio-util-0.4): New variable.
2021-03-10 23:49:58 +01:00
0d171198a2
gnu: rust-async-compression-0.3: Update to 0.3.7.
...
* gnu/packages/crates-io.scm (rust-async-compression-0.3): Update to 0.3.7.
[arguments]: Skip tests.
2021-03-10 23:49:58 +01:00
c2e5118452
gnu: Add rust-zstd-0.6.
...
* gnu/packages/crates-io.scm (rust-zstd-0.6): New variable.
(rust-zstd-0.5): Inherit from above.
2021-03-10 23:49:57 +01:00
7c0565dcb5
gnu: Add rust-zstd-safe-3.
...
* gnu/packages/crates-io.scm (rust-zstd-safe-3): New variable.
(rust-zstd-safe-2): Inherit from above.
2021-03-10 23:49:57 +01:00
1fa3b73618
gnu: rust-zstd-sys-1: Update to 1.4.20+zstd.1.4.9.
...
* gnu/packages/crates-io.scm (rust-zstd-sys-1): Update to 1.4.20+zstd.1.4.9.
2021-03-10 23:49:57 +01:00
8a6c39e848
gnu: Add rust-bindgen-0.57.
...
* gnu/packages/crates-io.scm (rust-bindgen-0.57): New variable.
(rust-bindgen-0.55): Inherit from above.
2021-03-10 23:49:56 +01:00
95b13ec637
gnu: Add rust-hyper-0.14.
...
* gnu/packages/crates-io.scm (rust-hyper-0.14): New variable.
(rust-hyper-0.13): Inherit from above.
2021-03-10 23:49:56 +01:00
b31d9a2fe6
gnu: Add rust-http-body-0.4.
...
* gnu/packages/crates-io.scm (rust-http-body-0.4): New variable.
(rust-http-body-0.3): Inherit from above.
2021-03-10 23:49:56 +01:00
0846ddb129
gnu: Add rust-h2-0.3.
...
* gnu/packages/crates-io.scm (rust-h2-0.3): New variable.
(rust-h2-0.2): Inherit from above.
2021-03-10 23:49:55 +01:00
50f7108957
gnu: Add rust-tokio-util-0.6.
...
* gnu/packages/crates-io.scm (rust-tokio-util-0.6): New variable.
(rust-tokio-util-0.3): Inherit from above.
2021-03-10 23:49:55 +01:00
92075bd48d
gnu: Add rust-httpdate-0.3.
...
* gnu/packages/crates-io.scm (rust-httpdate-0.3): New variable.
2021-03-10 23:49:55 +01:00
ec64626f15
gnu: Add rust-hyper-rustls-0.22.
...
* gnu/packages/crates-io.scm (rust-hyper-rustls-0.22): New variable.
(rust-hyper-rustls-0.21): Inherit from above.
2021-03-10 23:49:54 +01:00
4f2202bf30
gnu: Add rust-ct-logs-0.8.
...
* gnu/packages/crates-io.scm (rust-ct-logs-0.8): New variable.
(rust-ct-logs-0.7): Inherit from above.
2021-03-10 23:49:54 +01:00
d08a4c776f
gnu: Add rust-rustls-native-certs-0.5.
...
* gnu/packages/crates-io.scm (rust-rustls-native-certs-0.5): New variable.
(rust-rustls-native-certs-0.4): Inherit from above.
2021-03-10 23:49:54 +01:00
aab798976a
gnu: Add rust-webpki-roots-0.21.
...
* gnu/packages/crates-io.scm (rust-webpki-roots-0.21): New variable.
(rust-webpki-roots-0.20): Inherit from above.
2021-03-10 23:49:53 +01:00
d5249b0240
gnu: Add rust-hyper-tls-0.5.
...
* gnu/packages/crates-io.scm (rust-hyper-tls-0.5): New variable.
(rust-hyper-tls-0.4): Inherit from above.
2021-03-10 23:49:53 +01:00
7945e1611f
gnu: Add rust-tokio-native-tls-0.3.
...
* gnu/packages/crates-io.scm (rust-tokio-native-tls-0.3): New variable.
(rust-tokio-native-tls-0.1): Inherit from above.
2021-03-10 23:49:53 +01:00
f8e2758ec4
gnu: Add rust-tokio-socks-0.5.
...
* gnu/packages/crates-io.scm (rust-tokio-socks-0.5): New variable.
(rust-tokio-socks-0.3): Inherit from above.
2021-03-10 23:49:52 +01:00
aa0038b640
gnu: rust-native-tls-0.2: Update to 0.2.7.
...
* gnu/packages/crates-io.scm (rust-native-tls-0.2): Update to 0.2.7.
2021-03-10 23:49:52 +01:00
74efdfc4e9
gnu: Add rust-test-cert-gen-0.1.
...
* gnu/packages/crates-io.scm (rust-test-cert-gen-0.1): New variable.
2021-03-10 23:49:52 +01:00
0d279640ce
gnu: Add rust-trust-dns-resolver-0.20.
...
* gnu/packages/crates-io.scm (rust-trust-dns-resolver-0.20): New variable.
(rust-trust-dns-resolver-0.19): Inherit from above.
2021-03-10 23:49:51 +01:00
785cbb0989
gnu: Add rust-resolv-conf-0.7.
...
* gnu/packages/crates-io.scm (rust-resolv-conf-0.7): New variable.
(rust-resolv-conf-0.6): Inherit from above.
2021-03-10 23:49:51 +01:00
3843fc8fc8
gnu: Add rust-tokio-openssl-0.6.
...
* gnu/packages/crates-io.scm (rust-tokio-openssl-0.6): New variable.
(rust-tokio-openssl-0.4): Inherit from above.
2021-03-10 23:49:51 +01:00
43212fcaf6
gnu: Add rust-trust-dns-https-0.20.
...
* gnu/packages/crates-io.scm (rust-trust-dns-https-0.20): New variable.
(rust-trust-dns-https-0.19): Inherit from above.
2021-03-10 23:49:50 +01:00
46f8eecb51
gnu: Add rust-trust-dns-rustls-0.20.
...
* gnu/packages/crates-io.scm (rust-trust-dns-rustls-0.20): New variable.
(rust-trust-dns-rustls-0.19): Inherit from above.
2021-03-10 23:49:50 +01:00
58e89cb0b9
gnu: Add rust-trust-dns-openssl-0.20.
...
* gnu/packages/crates-io.scm (rust-trust-dns-openssl-0.20): New variable.
(rust-trust-dns-openssl-0.19): Inherit from above.
2021-03-10 23:49:50 +01:00
Mark H Weaver
Léo Le Bouter
Pierre Langlois
Tobias Geerinckx-Rice
Nicolas Goaziou