gnu: libgcrypt: Fix CVE-2017-0379.

* gnu/packages/gnupg.scm (libgcrypt)[replacement]: New field.
(libgcrypt/fixed): New variable.
This commit is contained in:
Efraim Flashner 2017-08-29 23:30:43 +03:00
parent 0ae32da8d6
commit 08cba8cca4
No known key found for this signature in database
GPG key ID: 41AAE7DCCA3D8351

View file

@ -81,6 +81,7 @@ (define-public libgpg-error
(define-public libgcrypt
(package
(replacement libgcrypt/fixed)
(name "libgcrypt")
(version "1.7.8")
(source (origin
@ -115,6 +116,18 @@ (define-public libgcrypt
(properties '((ftp-server . "ftp.gnupg.org")
(ftp-directory . "/gcrypt/libgcrypt")))))
(define libgcrypt/fixed
(package
(inherit libgcrypt)
(version "1.8.1")
(source (origin
(method url-fetch)
(uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
version ".tar.bz2"))
(sha256
(base32
"1cvqd9jk5qshbh48yh3ixw4zyr4n5k50r3475rrh20xfn7w7aa3s"))))))
(define-public libassuan
(package
(name "libassuan")