summaryrefslogtreecommitdiff
path: root/gnu
diff options
context:
space:
mode:
authorMarius Bakke <mbakke@fastmail.com>2018-04-15 16:48:25 +0200
committerMarius Bakke <mbakke@fastmail.com>2018-04-18 00:33:30 +0200
commit217b8c2e061a5b637e198f1ed9960d4abe2b0a46 (patch)
tree6d731b26231416fb4f31276596e012c4b9b4d813 /gnu
parent269d0858c6c01145b07be8ebb170e448894b112a (diff)
downloadguix-patches-217b8c2e061a5b637e198f1ed9960d4abe2b0a46.tar
guix-patches-217b8c2e061a5b637e198f1ed9960d4abe2b0a46.tar.gz
gnu: perl: Replace with 5.26.2 [fixes CVE-2018-{6797,6798,6913}].
* gnu/packages/perl.scm (perl-5.26.2): New public variable. (perl)[replacement]: New field.
Diffstat (limited to 'gnu')
-rw-r--r--gnu/packages/perl.scm16
1 files changed, 15 insertions, 1 deletions
diff --git a/gnu/packages/perl.scm b/gnu/packages/perl.scm
index 50273d31e4..34eef565b1 100644
--- a/gnu/packages/perl.scm
+++ b/gnu/packages/perl.scm
@@ -13,7 +13,7 @@
;;; Copyright © 2016 Ben Woodcroft <donttrustben@gmail.com>
;;; Copyright © 2016 Jan Nieuwenhuizen <janneke@gnu.org>
;;; Copyright © 2017 Raoul J.P. Bonnal <ilpuccio.febo@gmail.com>
-;;; Copyright © 2017 Marius Bakke <mbakke@fastmail.com>
+;;; Copyright © 2017, 2018 Marius Bakke <mbakke@fastmail.com>
;;; Copyright © 2017 Adriano Peluso <catonano@gmail.com>
;;; Copyright © 2017, 2018 Tobias Geerinckx-Rice <me@tobias.gr>
;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
@@ -59,6 +59,7 @@
(package
(name "perl")
(version "5.26.1")
+ (replacement perl-5.26.2)
(source (origin
(method url-fetch)
(uri (string-append "mirror://cpan/src/5.0/perl-"
@@ -155,6 +156,19 @@
(home-page "http://www.perl.org/")
(license gpl1+))) ; or "Artistic"
+;; Fixes CVE-2018-6797, CVE-2018-6798, and CVE-2018-6913.
+;; See <https://metacpan.org/changes/release/SHAY/perl-5.26.2>.
+(define-public perl-5.26.2
+ (package/inherit perl
+ (version "5.26.2")
+ (source (origin
+ (inherit (package-source perl))
+ (uri (string-append "mirror://cpan/src/5.0/perl-"
+ version ".tar.gz"))
+ (sha256
+ (base32
+ "03gpnxx1g6hvlh0v4aqx00580h787sfywp1vlvw64q2xcbm9qbsp"))))))
+
(define-public perl-algorithm-c3
(package
(name "perl-algorithm-c3")