From ffa01e68859bb7a6daa9fcffdc8d77ca35db4bc0 Mon Sep 17 00:00:00 2001
From: Marius Bakke <marius@gnu.org>
Date: Thu, 12 Aug 2021 00:23:01 +0200
Subject: gnu: mit-krb5: Replace with 1.19.2 [fixes CVE-2021-36222].

This is an adaptation of fdd2f57359, for the 1.19 branch of mit-krb5.

* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
(mit-krb5-1.19.2): New variable.
---
 gnu/packages/kerberos.scm | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'gnu/packages')

diff --git a/gnu/packages/kerberos.scm b/gnu/packages/kerberos.scm
index 5065f3be17..01fea23ec1 100644
--- a/gnu/packages/kerberos.scm
+++ b/gnu/packages/kerberos.scm
@@ -54,6 +54,7 @@
 (define-public mit-krb5
   (package
     (name "mit-krb5")
+    (replacement mit-krb5-1.19.2)
     (version "1.19.1")
     (source (origin
               (method url-fetch)
@@ -117,6 +118,23 @@ cryptography.")
     (home-page "https://web.mit.edu/kerberos/")
     (properties '((cpe-name . "kerberos")))))
 
+(define mit-krb5-1.19.2
+  (package
+    (inherit mit-krb5)
+    (version "1.19.2")
+    (source (origin
+              (inherit (package-source mit-krb5))
+              (uri (list
+                    (string-append "https://web.mit.edu/kerberos/dist/krb5/"
+                                   (version-major+minor version)
+                                   "/krb5-" version ".tar.gz")
+                    (string-append "https://kerberos.org/dist/krb5/"
+                                   (version-major+minor version)
+                                   "/krb5-" version ".tar.gz")))
+              (sha256
+               (base32
+                "0snz1jm2w4dkk65zcz953jmmv9mqa30fanch2bk8r3rs9vp3yi8h"))))))
+
 (define-public shishi
   (package
     (name "shishi")
-- 
cgit v1.2.3