~ruther/guix-local

d058708e86dab50579d3147e3ee2c6fcc03e63c9 — Leo Famulari 9 years ago 135ba81
gnu: libidn: Replace with 1.33 [fixes CVE-2015-8948 and CVE-2016-{6261,6263}].

* gnu/packages/libidn.scm (libidn)[replacement]: New field.
(libidn-1.33): New variable.
1 files changed, 14 insertions(+), 0 deletions(-)

M gnu/packages/libidn.scm
M gnu/packages/libidn.scm => gnu/packages/libidn.scm +14 -0
@@ 27,6 27,7 @@
(define-public libidn
  (package
   (name "libidn")
   (replacement libidn-1.33)
   (version "1.32")
   (source (origin
            (method url-fetch)


@@ 45,3 46,16 @@ names.  It includes native C, C# and Java libraries.")
   ;; the command line tool is gpl3+.
   (license (list gpl2+ gpl3+ lgpl3+ fdl1.3+))
   (home-page "http://www.gnu.org/software/libidn/")))

(define libidn-1.33
  (package
    (inherit libidn)
    (source
      (let ((version "1.33"))
        (origin
          (method url-fetch)
          (uri (string-append "mirror://gnu/libidn/libidn-" version
                              ".tar.gz"))
          (sha256
           (base32
            "068fjg2arlppjqqpzd714n1lf6gxkpac9v5yyvp1qwmv6nvam9s4")))))))