* gnu/packages/curl.scm (curl-7.84.0)[source]: Add patch to work around
implicit function declaration.
* gnu/packages/patches/curl-easy-lock.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
This fixes CVE-2022-22576, CVE-2022-27774, CVE-2022-27775, CVE-2022-27776,
CVE-2022-27781, and CVE-2022-27782.
* gnu/packages/curl.scm (curl)[replacement]: New field.
(curl-7.84.0): New private variable.
* gnu/packages/curl.scm (curl)[native-search-paths]: Use the
$SSL_CERT_DIR/$SSL_CERT_FILE from (guix search-paths) instead
of a local copy.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Note: this merge actually changes the 'curl' and 'python-attrs' derivations,
as part of solving caf4a7a277 and
12964df69a respectively.
4604d43c0e (gnu: gnutls@3.6.16: Fix cross-compilation.) was ignored because it
cannot currently be tested.
Conflicts:
gnu/local.mk
gnu/packages/aidc.scm
gnu/packages/boost.scm
gnu/packages/curl.scm
gnu/packages/nettle.scm
gnu/packages/networking.scm
gnu/packages/python-xyz.scm
gnu/packages/tls.scm
Fixes <https://bugs.gnu.org/49035>.
* gnu/packages/patches/curl-7.77-tls-priority-string.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/curl.scm (curl-7.77.0)[source]: Use it.
Fixes CVE-2021-22876 and CVE-2021-22890.
* gnu/packages/curl.scm (curl/fixed): New variable.
(curl)[replacement]: New field.
* gnu/packages/patches/curl-7.76-use-ssl-cert-env.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/curl.scm (guile-curl): Update to 0.7.
[#:modules, #:imported-modules]: Load guile-build-system for
target-guile-effective-version.
[#:configure-flags]: Use target-guile-effective-version.
[#:phases]: Add 'patch-undefined-references.
Use target-guile-effective-version.
[inputs]: Use guile-3.0.
When OpenLDAP is missing, cURL will fall back to an internal LDAP
client implementation, so there is no loss of functionality. This simplifies
bootstrapping and reduces the closure size by 6.1 MiB.
* gnu/packages/curl.scm (curl)[inputs]: Remove OPENLDAP.
Efraim Flashner
Tobias Geerinckx-Rice
Ludovic Courtès
Liliana Marie Prikler
Marius Bakke
Maxime Devos
Imran Iqbal
raingloom
Maxim Cournoyer
Sarah Morgensen
Felix Gruber
Jean-Baptiste Volatier
Leo Famulari
Léo Le Bouter
Xinglu Chen
Leo Prikler
Ricardo Wurmus
Jan (janneke) Nieuwenhuizen
Danny Milosavljevic
Jakub Kądziołka
Dale Mellor