nixo
/
guix-devel
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

gnu: libgcrypt: Fix CVE-2017-0379. 

* gnu/packages/gnupg.scm (libgcrypt)[replacement]: New field.
(libgcrypt/fixed): New variable.
This commit is contained in:
Efraim Flashner 2017-08-29 23:30:43 +03:00
parent 0ae32da8d6
commit 08cba8cca4
No known key found for this signature in database
GPG Key ID: 41AAE7DCCA3D8351
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
gnu/packages/gnupg.scm
View File

@ -81,6 +81,7 @@ Daemon and possibly more in the future.")
(define-public libgcrypt (define-public libgcrypt
(package (package
(replacement libgcrypt/fixed)
(name "libgcrypt") (name "libgcrypt")
(version "1.7.8") (version "1.7.8")
(source (origin (source (origin
@ -115,6 +116,18 @@ generation.")
(properties '((ftp-server . "ftp.gnupg.org") (properties '((ftp-server . "ftp.gnupg.org")
(ftp-directory . "/gcrypt/libgcrypt"))))) (ftp-directory . "/gcrypt/libgcrypt")))))
(define libgcrypt/fixed
(package
(inherit libgcrypt)
(version "1.8.1")
(source (origin
(method url-fetch)
(uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
version ".tar.bz2"))
(sha256
(base32
"1cvqd9jk5qshbh48yh3ixw4zyr4n5k50r3475rrh20xfn7w7aa3s"))))))
(define-public libassuan (define-public libassuan
(package (package
(name "libassuan") (name "libassuan")