unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
From: Aaron Covrig via Guix-patches via <guix-patches@gnu.org>
To: 69721@debbugs.gnu.org
Cc: Aaron Covrig <aaron.covrig.us@ieee.org>, ashish.is@lostca.se
Subject: [bug#69721] [PATCH v2] gnu: wget-next: Graft wget to v1.25.0, fixing CVE-2024-10524
Date: Sat, 23 Nov 2024 15:38:33 -0500	[thread overview]
Message-ID: <20241123204232.137113-1-aaron.covrig.us@ieee.org> (raw)
In-Reply-To: <afd2ad899af2fc840dc627f49e784561ceb7a7b1.1710132987.git.atai@atai.org>

* gnu/packages/wget.scm (wget-next): new variable, graft wget
---
Hello all,

I have combined the most recent patch commit as it was done as a diff
against the original commit. Further more, I believe the reason the
update was done as `wget-next` is to allow it to be grafted in since
wget is a dependency for so many packages; to this end I have also updated
the commit to apply as a graft (for reviewers, this is my first time
submitting a patch using a graft, so I may have missed something).

 gnu/packages/wget.scm | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/gnu/packages/wget.scm b/gnu/packages/wget.scm
index 4bd4d3c87a..dc48fb1eb7 100644
--- a/gnu/packages/wget.scm
+++ b/gnu/packages/wget.scm
@@ -47,6 +47,7 @@ (define-public wget
   (package
     (name "wget")
     (version "1.21.4")
+    (replacement wget-next)
     (source
      (origin
       (method url-fetch)
@@ -74,6 +75,18 @@ (define-public wget
 in downloaded documents to relative links.")
     (license license:gpl3+))) ; some files are under GPLv2+
 
+
+(define-public wget-next
+  (package
+    (inherit wget)
+    (version "1.25.0")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "mirror://gnu/wget/wget-" version ".tar.lz"))
+       (sha256
+        (base32 "07waw3s51zmjqzqq717xyyd353qc1ajcd38lh7y8i85hav3mq8hr"))))))
+
 (define-public wgetpaste
   (package
     (name "wgetpaste")

base-commit: 36f516bfcdf64185f5d70c21a908283be22a34fd
-- 
2.46.0





      parent reply	other threads:[~2024-11-23 20:44 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-03-11  4:56 [bug#69721] [PATCH] gnu: Add wget-next Andy Tai
2024-06-07 19:57 ` [bug#69721] Why 'next'? Dale Mellor via Guix-patches
2024-11-13 10:16 ` [bug#69721] [PATCH] gnu: wget: Update to 1.25.0. [security fixes] ashish.is--- via Guix-patches via
2024-11-23 20:38 ` Aaron Covrig via Guix-patches via [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20241123204232.137113-1-aaron.covrig.us@ieee.org \
    --to=guix-patches@gnu.org \
    --cc=69721@debbugs.gnu.org \
    --cc=aaron.covrig.us@ieee.org \
    --cc=ashish.is@lostca.se \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).