From 3abaca2aaed87927b18d80381fe64897ac889f8c Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Sun, 13 Jun 2021 20:03:29 -0400 Subject: gnu: nettle-3.5: Add replacement to fix CVE-2021-3580 et al. * gnu/packages/patches/nettle-3.5-check-_pkcs1_sec_decrypt-msg-len.patch, gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt1.patch, gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt2.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/nettle.scm (nettle)[replacement]: New field. (nettle-3.5/fixed): New variable. --- gnu/local.mk | 3 +++ 1 file changed, 3 insertions(+) (limited to 'gnu/local.mk') diff --git a/gnu/local.mk b/gnu/local.mk index fdbf2272ed..f1a6d69bf6 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1462,6 +1462,9 @@ dist_patch_DATA = \ %D%/packages/patches/netsurf-system-utf8proc.patch \ %D%/packages/patches/netsurf-y2038-tests.patch \ %D%/packages/patches/netsurf-longer-test-timeout.patch \ + %D%/packages/patches/nettle-3.5-check-_pkcs1_sec_decrypt-msg-len.patch \ + %D%/packages/patches/nettle-3.5-CVE-2021-3580-pt1.patch \ + %D%/packages/patches/nettle-3.5-CVE-2021-3580-pt2.patch \ %D%/packages/patches/nfs4-acl-tools-0.3.7-fixpaths.patch \ %D%/packages/patches/ngircd-handle-zombies.patch \ %D%/packages/patches/network-manager-plugin-path.patch \ -- cgit v1.2.3