[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
02/02: gnu: nghttp2: Replace with version 1.41 [fixes CVE-2020-11080].
From: |
guix-commits |
Subject: |
02/02: gnu: nghttp2: Replace with version 1.41 [fixes CVE-2020-11080]. |
Date: |
Thu, 11 Jun 2020 13:08:55 -0400 (EDT) |
civodul pushed a commit to branch master
in repository guix.
commit ecf92194a55188a9c217d76617378749db063453
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Thu Jun 11 18:54:15 2020 +0200
gnu: nghttp2: Replace with version 1.41 [fixes CVE-2020-11080].
* gnu/packages/web.scm (nghttp2-1.41): New variable.
(nghttp2)[replacement]: New field.
---
gnu/packages/web.scm | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm
index 82174c0..a04d755 100644
--- a/gnu/packages/web.scm
+++ b/gnu/packages/web.scm
@@ -7193,6 +7193,7 @@ derivation by David Revoy from the original MonsterID by
Andreas Gohr.")
(package
(name "nghttp2")
(version "1.40.0")
+ (replacement nghttp2-1.41)
(source
(origin
(method url-fetch)
@@ -7272,6 +7273,20 @@ compressed JSON header blocks.
@end itemize\n")
(license license:expat)))
+(define-public nghttp2-1.41 ;fixes CVE-2020-11080
+ (package
+ (inherit nghttp2)
+ (version "1.41.0")
+ (source
+ (origin
+ (method url-fetch)
+ (uri (string-append "https://github.com/nghttp2/nghttp2/"
+ "releases/download/v" version "/"
+ "nghttp2-" version ".tar.xz"))
+ (sha256
+ (base32
+ "1hk77vngjmvvzb5y1gi1aqwf6qywrc7yak08zvzb7x81qs6mphmb"))))))
+
(define-public hpcguix-web
(let ((commit "9de63562b06b4aef3a3afe5ecb18d3c91e57ee74")
(revision "5"))