~ruther/guix-local

67f5adbae657f40e595051bd4bd7a7b9d744a09c — Mark H Weaver 9 years ago 90e2024
gnu: libgcrypt: Replace with 1.7.3 [fixes CVE-2016-6316].

* gnu/packages/gnupg.scm (libgcrypt)[replacement]: New field.
(libgcrypt-1.7.3): New variable.
1 files changed, 14 insertions(+), 0 deletions(-)

M gnu/packages/gnupg.scm
M gnu/packages/gnupg.scm => gnu/packages/gnupg.scm +14 -0
@@ 74,6 74,7 @@ Daemon and possibly more in the future.")
(define-public libgcrypt
  (package
    (name "libgcrypt")
    (replacement libgcrypt-1.7.3)
    (version "1.7.0")
    (source (origin
             (method url-fetch)


@@ 107,6 108,19 @@ generation.")
    (properties '((ftp-server . "ftp.gnupg.org")
                  (ftp-directory . "/gcrypt/libgcrypt")))))

(define-public libgcrypt-1.7.3
  (package
    (inherit libgcrypt)
    (source
     (let ((version "1.7.3"))
       (origin
         (method url-fetch)
         (uri (string-append "mirror://gnupg/libgcrypt/libgcrypt-"
                             version ".tar.bz2"))
         (sha256
          (base32
           "0wbh6fq5zi9wg2xcfvfpwh7dv52jihivx1vm4h91c2kx0w8n3b6x")))))))

(define-public libgcrypt-1.5
  (package (inherit libgcrypt)
    (replacement libgcrypt-1.5.6)