HCoop / jackhill / guix / guix.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d3acad1) | patch
gnu: nettle-3.5: Add replacement to fix CVE-2021-3580 et al.
authorMark H Weaver <mhw@netris.org>
Mon, 14 Jun 2021 00:03:29 +0000 (20:03 -0400)
committerMark H Weaver <mhw@netris.org>
Mon, 14 Jun 2021 07:30:03 +0000 (03:30 -0400)
commit3abaca2aaed87927b18d80381fe64897ac889f8c
tree8d6b6c730f9cd07c53db0c12473fdccc7a74bc70tree | snapshot (tar.gz zip)
parentd3acad16260e96d3df606817fc4e467aad27741acommit | diff
gnu: nettle-3.5: Add replacement to fix CVE-2021-3580 et al.

* gnu/packages/patches/nettle-3.5-check-_pkcs1_sec_decrypt-msg-len.patch,
gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt1.patch,
gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt2.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/nettle.scm (nettle)[replacement]: New field.
(nettle-3.5/fixed): New variable.
gnu/local.mk diff | blob | blame | history
gnu/packages/nettle.scm diff | blob | blame | history
gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt1.patch [new file with mode: 0644] blob
gnu/packages/patches/nettle-3.5-CVE-2021-3580-pt2.patch [new file with mode: 0644] blob
gnu/packages/patches/nettle-3.5-check-_pkcs1_sec_decrypt-msg-len.patch [new file with mode: 0644] blob
jackhill's copy of GNU Guix: https://guix.gnu.org/