diff options
| author | Solene Rapenne <solene@perso.pw> | 2021-05-28 19:05:23 +0200 |
|---|---|---|
| committer | Leo Famulari <leo@famulari.name> | 2021-05-28 14:55:59 -0400 |
| commit | 0b70eb03cbcf5df7de9f468d9e2a3b53379779fe (patch) | |
| tree | 8ef178a30f0d06fab391f7e7a88e0bacb8764893 /gnu/packages/tls.scm | |
| parent | 4ec964ec38d511ca203cd3c29b194d0cfb99667a (diff) | |
| download | guix-patches-0b70eb03cbcf5df7de9f468d9e2a3b53379779fe.tar guix-patches-0b70eb03cbcf5df7de9f468d9e2a3b53379779fe.tar.gz | |
gnu: gnutls: Replace with 3.6.16 [fixes CVE-2021-20305].
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls-3.6.16): New variable.
Signed-off-by: Leo Famulari <leo@famulari.name>
Diffstat (limited to 'gnu/packages/tls.scm')
| -rw-r--r-- | gnu/packages/tls.scm | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 174438ad87..55410f3911 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -15,6 +15,7 @@ ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org> ;;; Copyright © 2019 Mathieu Othacehe <m.othacehe@gmail.com> ;;; Copyright © 2020 Jan (janneke) Nieuwenhuizen <janneke@gnu.org> +;;; Copyright © 2021 Solene Rapenne <solene@perso.pw> ;;; ;;; This file is part of GNU Guix. ;;; @@ -165,6 +166,7 @@ living in the same process.") (package (name "gnutls") (version "3.6.15") + (replacement gnutls-3.6.16) (source (origin (method url-fetch) ;; Note: Releases are no longer on ftp.gnu.org since the @@ -258,6 +260,22 @@ required structures.") (properties '((ftp-server . "ftp.gnutls.org") (ftp-directory . "/gcrypt/gnutls"))))) +;; Replacement package to fix CVE-2021-20305. +(define gnutls-3.6.16 + (package + (inherit gnutls) + (version "3.6.16") + (source (origin + (method url-fetch) + (uri (string-append "mirror://gnupg/gnutls/v" + (version-major+minor version) + "/gnutls-" version ".tar.xz")) + (patches (search-patches "gnutls-skip-trust-store-test.patch" + "gnutls-cross.patch")) + (sha256 + (base32 + "1czk511pslz367shf32f2jvvkp7y1323bcv88c2qng98mj0v6y8v")))))) + (define-public gnutls/guile-2.0 ;; GnuTLS for Guile 2.0. (package/inherit gnutls |