gnu: libgcrypt: Replace with 1.8.5 [fixes CVE-2019-13627].

* gnu/packages/gnupg.scm (libgcrypt-1.8.5): New variable.
(libgcrypt)[replacement]: New field.
This commit is contained in:
Marius Bakke 2019-10-13 21:02:08 +02:00
parent 046915dead
commit 24496210ea
No known key found for this signature in database
GPG key ID: A2A06DF2A33A54FA

View file

@ -14,7 +14,7 @@
;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
;;; Copyright © 2017 Petter <petter@mykolab.ch>
;;; Copyright © 2018, 2019 Tobias Geerinckx-Rice <me@tobias.gr>
;;; Copyright © 2018 Marius Bakke <mbakke@fastmail.com>
;;; Copyright © 2018, 2019 Marius Bakke <mbakke@fastmail.com>
;;; Copyright © 2018 Björn Höfling <bjoern.hoefling@bjoernhoefling.de>
;;;
;;; This file is part of GNU Guix.
@ -111,6 +111,7 @@ (define-public libgcrypt
(package
(name "libgcrypt")
(version "1.8.4")
(replacement libgcrypt-1.8.5)
(source (origin
(method url-fetch)
(uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
@ -143,6 +144,18 @@ (define-public libgcrypt
(properties '((ftp-server . "ftp.gnupg.org")
(ftp-directory . "/gcrypt/libgcrypt")))))
(define-public libgcrypt-1.8.5
(package
(inherit libgcrypt)
(version "1.8.5")
(source (origin
(method url-fetch)
(uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
version ".tar.bz2"))
(sha256
(base32
"1hvsazms1bfd769q0ngl0r9g5i4m9mpz9jmvvrdzyzk3rfa2ljiv"))))))
(define-public libassuan
(package
(name "libassuan")