From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53196) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzlCV-00044t-3u for guix-patches@gnu.org; Wed, 04 Oct 2017 11:03:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzlCQ-0004V4-7t for guix-patches@gnu.org; Wed, 04 Oct 2017 11:03:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:40365) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dzlCQ-0004Uz-4k for guix-patches@gnu.org; Wed, 04 Oct 2017 11:03:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dzlCP-0004Ou-Qz for guix-patches@gnu.org; Wed, 04 Oct 2017 11:03:01 -0400 Subject: [bug#28702] [PATCH] gnu: curl: Update replacement to 7.56.0. [security fixes] Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53092) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzlBl-0003Yo-4a for guix-patches@gnu.org; Wed, 04 Oct 2017 11:02:22 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzlBf-00049u-2G for guix-patches@gnu.org; Wed, 04 Oct 2017 11:02:21 -0400 Received: from mout02.posteo.de ([185.67.36.66]:50922) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dzlBe-00049O-S7 for guix-patches@gnu.org; Wed, 04 Oct 2017 11:02:14 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id 001B820D50 for ; Wed, 4 Oct 2017 17:02:12 +0200 (CEST) From: Kei Kebreau Date: Wed, 4 Oct 2017 11:01:45 -0400 Message-Id: <20171004150145.13595-1-kkebreau@posteo.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 28702@debbugs.gnu.org Cc: Kei Kebreau Fixes CVE-2017-1000254. See for details. * gnu/packages/curl.scm (curl)[replacement]: Update to 7.56.0. (curl-7.55.0): Rename to ... (curl-7.56.0): ... this. [arguments]: Remove 'fix-Makefile' phase. --- gnu/packages/curl.scm | 17 ++--------------- 1 file changed, 2 insertions(+), 15 deletions(-) diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm index 23606b481..552df5dc3 100644 --- a/gnu/packages/curl.scm +++ b/gnu/packages/curl.scm @@ -126,25 +126,12 @@ tunneling, and so on.") (define-public curl-7.55.0 (package (inherit curl) - (version "7.55.0") + (version "7.56.0") (source (origin (method url-fetch) (uri (string-append "https://curl.haxx.se/download/curl-" version ".tar.xz")) - (patches (search-patches "curl-bounds-check.patch")) (sha256 (base32 - "1785vxi0jamiv9d1wr1l45g0fm9ircxdfyfzf7ld8zv0z0i8bmfd")))) - (arguments - `(,@(substitute-keyword-arguments (package-arguments curl) - ((#:phases phases) - `(modify-phases ,phases - (add-before 'install 'fix-Makefile - ;; Fix a regression in 7.55.0 where docs are not installed. - ;; https://github.com/curl/curl/commit/a7bbbb7c368c6096802007f61f19a02e9d75285b - (lambda _ - (substitute* "Makefile" - (("install-data-hook:\n") - "install-data-hook:\n\tcd docs/libcurl && $(MAKE) install\n")) - #t))))))))) + "0wni3zkw7jyrwgwkqnrkf2x2b7c78wsp7p4z6a246hz9l367nhrj")))))) -- 2.14.2