* libidn security update patch
@ 2016-09-02 6:41 Leo Famulari
2016-09-02 12:47 ` Ludovic Courtès
0 siblings, 1 reply; 3+ messages in thread
From: Leo Famulari @ 2016-09-02 6:41 UTC (permalink / raw)
To: guix-devel
[-- Attachment #1.1: Type: text/plain, Size: 19 bytes --]
... and the patch.
[-- Attachment #1.2: 0001-gnu-libidn-Replace-with-1.33-fixes-CVE-2015-8948-and.patch --]
[-- Type: text/plain, Size: 1393 bytes --]
From 217f444aa56ec292ddfaacfabcbb6ddea8d1f262 Mon Sep 17 00:00:00 2001
From: Leo Famulari <leo@famulari.name>
Date: Fri, 2 Sep 2016 02:11:49 -0400
Subject: [PATCH] gnu: libidn: Replace with 1.33 [fixes CVE-2015-8948 and
CVE-2016-{6261,6263}].
* gnu/packages/libidn.scm (libidn)[replacement]: New field.
(libidn-1.33): New variable.
---
gnu/packages/libidn.scm | 14 ++++++++++++++
1 file changed, 14 insertions(+)
diff --git a/gnu/packages/libidn.scm b/gnu/packages/libidn.scm
index 053565c..432c1fe 100644
--- a/gnu/packages/libidn.scm
+++ b/gnu/packages/libidn.scm
@@ -27,6 +27,7 @@
(define-public libidn
(package
(name "libidn")
+ (replacement libidn-1.33)
(version "1.32")
(source (origin
(method url-fetch)
@@ -45,3 +46,16 @@ names. It includes native C, C# and Java libraries.")
;; the command line tool is gpl3+.
(license (list gpl2+ gpl3+ lgpl3+ fdl1.3+))
(home-page "http://www.gnu.org/software/libidn/")))
+
+(define libidn-1.33
+ (package
+ (inherit libidn)
+ (source
+ (let ((version "1.33"))
+ (origin
+ (method url-fetch)
+ (uri (string-append "mirror://gnu/libidn/libidn-" version
+ ".tar.gz"))
+ (sha256
+ (base32
+ "068fjg2arlppjqqpzd714n1lf6gxkpac9v5yyvp1qwmv6nvam9s4")))))))
--
2.9.3
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: libidn security update patch
2016-09-02 6:41 libidn security update patch Leo Famulari
@ 2016-09-02 12:47 ` Ludovic Courtès
2016-09-02 13:56 ` Leo Famulari
0 siblings, 1 reply; 3+ messages in thread
From: Ludovic Courtès @ 2016-09-02 12:47 UTC (permalink / raw)
To: Leo Famulari; +Cc: guix-devel
Leo Famulari <leo@famulari.name> skribis:
> From 217f444aa56ec292ddfaacfabcbb6ddea8d1f262 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo@famulari.name>
> Date: Fri, 2 Sep 2016 02:11:49 -0400
> Subject: [PATCH] gnu: libidn: Replace with 1.33 [fixes CVE-2015-8948 and
> CVE-2016-{6261,6263}].
>
> * gnu/packages/libidn.scm (libidn)[replacement]: New field.
> (libidn-1.33): New variable.
Perfect, thank you!
Ludo’.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: libidn security update patch
2016-09-02 12:47 ` Ludovic Courtès
@ 2016-09-02 13:56 ` Leo Famulari
0 siblings, 0 replies; 3+ messages in thread
From: Leo Famulari @ 2016-09-02 13:56 UTC (permalink / raw)
To: Ludovic Courtès; +Cc: guix-devel
On Fri, Sep 02, 2016 at 02:47:35PM +0200, Ludovic Courtès wrote:
> Leo Famulari <leo@famulari.name> skribis:
>
> > From 217f444aa56ec292ddfaacfabcbb6ddea8d1f262 Mon Sep 17 00:00:00 2001
> > From: Leo Famulari <leo@famulari.name>
> > Date: Fri, 2 Sep 2016 02:11:49 -0400
> > Subject: [PATCH] gnu: libidn: Replace with 1.33 [fixes CVE-2015-8948 and
> > CVE-2016-{6261,6263}].
> >
> > * gnu/packages/libidn.scm (libidn)[replacement]: New field.
> > (libidn-1.33): New variable.
>
> Perfect, thank you!
Pushed as d058708e8, with a follow-up on core-updates to ensure the
conflict is resolved properly.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2016-09-02 13:57 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-09-02 6:41 libidn security update patch Leo Famulari
2016-09-02 12:47 ` Ludovic Courtès
2016-09-02 13:56 ` Leo Famulari
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).