From ef2c7fb5da058030677da4abe9fec177357ee25d Mon Sep 17 00:00:00 2001 From: Efraim Flashner Date: Thu, 29 Jun 2017 21:04:09 +0300 Subject: gnu: libgcrypt: Add mitigation for CVE-2017-7526. * gnu/packages/gnupg.scm (libgcrypt)[replacment]: New field. (libgcrypt-1.7.8): New variable. (libgcrypt-1.5)[replacment]: New field. --- gnu/packages/gnupg.scm | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/gnu/packages/gnupg.scm b/gnu/packages/gnupg.scm index 9efd32a3f8..e42afbafda 100644 --- a/gnu/packages/gnupg.scm +++ b/gnu/packages/gnupg.scm @@ -4,7 +4,7 @@ ;;; Copyright © 2014 Eric Bavier ;;; Copyright © 2014, 2015, 2016 Mark H Weaver ;;; Copyright © 2015 Paul van der Walt -;;; Copyright © 2015, 2016 Efraim Flashner +;;; Copyright © 2015, 2016, 2017 Efraim Flashner ;;; Copyright © 2015, 2016 Ricardo Wurmus ;;; Copyright © 2016 Christopher Allan Webber ;;; Copyright © 2016 ng0 @@ -82,6 +82,7 @@ (define-public libgpg-error (define-public libgcrypt (package (name "libgcrypt") + (replacement libgcrypt-1.7.8) (version "1.7.6") (source (origin (method url-fetch) @@ -115,8 +116,22 @@ (define-public libgcrypt (properties '((ftp-server . "ftp.gnupg.org") (ftp-directory . "/gcrypt/libgcrypt"))))) +(define libgcrypt-1.7.8 + (package + (inherit libgcrypt) + (replacement #f) + (version "1.7.8") + (source (origin + (method url-fetch) + (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-" + version ".tar.bz2")) + (sha256 + (base32 + "16f1rsv4y4w2pk1il2jbcqggsb6mrlfva5vayd205fp68zm7d0ll")))))) + (define-public libgcrypt-1.5 (package (inherit libgcrypt) + (replacement #f) (version "1.5.6") (source (origin -- cgit v1.2.3