diff mbox

[1/1] gnu: curl: Update replacement to 7.50.2 [fixes CVE-2016-7141].

Message ID f354e3dd22c79c266d97d3944702a1fa7203b2c5.1473285584.git.leo@famulari.name
State New
Headers show

Commit Message

Leo Famulari Sept. 7, 2016, 10:04 p.m. UTC
* gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.2
(curl-7.50.1): Replace with ...
(curl-7.50.2): ... this.
---
 gnu/packages/curl.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

Comments

Efraim Flashner Sept. 8, 2016, 5:40 a.m. UTC | #1
On Wed, Sep 07, 2016 at 06:04:23PM -0400, Leo Famulari wrote:
> * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.2
> (curl-7.50.1): Replace with ...
> (curl-7.50.2): ... this.
> ---
>  gnu/packages/curl.scm | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
> index a250bb1..f3c0ade 100644
> --- a/gnu/packages/curl.scm
> +++ b/gnu/packages/curl.scm
> @@ -40,7 +40,7 @@
>  (define-public curl
>    (package
>     (name "curl")
> -   (replacement curl-7.50.1)
> +   (replacement curl-7.50.2)
>     (version "7.47.0")
>     (source (origin
>              (method url-fetch)
> @@ -125,15 +125,15 @@ tunneling, and so on.")
>                                    "See COPYING in the distribution."))
>     (home-page "http://curl.haxx.se/")))
>  
> -(define curl-7.50.1
> +(define curl-7.50.2
>    (package
>      (inherit curl)
>      (source
> -      (let ((version "7.50.1"))
> +      (let ((version "7.50.2"))
>          (origin
>            (method url-fetch)
>            (uri (string-append "https://curl.haxx.se/download/curl-"
>                                version ".tar.lzma"))
>            (sha256
>             (base32
> -            "0qc3qp3h18v24irzw7dgg1jf39v4hnz8irv83v9lbn9rxzrpdcdj")))))))
> +            "0d5ly1xms0hh5zkv0m77d50c1816ywmbvmi1m158jyl70ndi9gby")))))))
> -- 
> 2.10.0
> 

Looks good!
Leo Famulari Sept. 8, 2016, 3:45 p.m. UTC | #2
On Thu, Sep 08, 2016 at 08:40:12AM +0300, Efraim Flashner wrote:
> On Wed, Sep 07, 2016 at 06:04:23PM -0400, Leo Famulari wrote:
> > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.2
> > (curl-7.50.1): Replace with ...
> > (curl-7.50.2): ... this.

> Looks good!

Thanks, pushed!
ng0 Sept. 9, 2016, 9:57 a.m. UTC | #3
Leo Famulari <leo@famulari.name> writes:

> [ Unknown signature status ]
> On Thu, Sep 08, 2016 at 08:40:12AM +0300, Efraim Flashner wrote:
>> On Wed, Sep 07, 2016 at 06:04:23PM -0400, Leo Famulari wrote:
>> > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.2
>> > (curl-7.50.1): Replace with ...
>> > (curl-7.50.2): ... this.
>
>> Looks good!
>
> Thanks, pushed!

Thanks for bringing this to attention, I'll work releasing gnurl update
and then prepare a patch for Guix to version bump gnurl.
diff mbox

Patch

diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
index a250bb1..f3c0ade 100644
--- a/gnu/packages/curl.scm
+++ b/gnu/packages/curl.scm
@@ -40,7 +40,7 @@ 
 (define-public curl
   (package
    (name "curl")
-   (replacement curl-7.50.1)
+   (replacement curl-7.50.2)
    (version "7.47.0")
    (source (origin
             (method url-fetch)
@@ -125,15 +125,15 @@  tunneling, and so on.")
                                   "See COPYING in the distribution."))
    (home-page "http://curl.haxx.se/")))
 
-(define curl-7.50.1
+(define curl-7.50.2
   (package
     (inherit curl)
     (source
-      (let ((version "7.50.1"))
+      (let ((version "7.50.2"))
         (origin
           (method url-fetch)
           (uri (string-append "https://curl.haxx.se/download/curl-"
                               version ".tar.lzma"))
           (sha256
            (base32
-            "0qc3qp3h18v24irzw7dgg1jf39v4hnz8irv83v9lbn9rxzrpdcdj")))))))
+            "0d5ly1xms0hh5zkv0m77d50c1816ywmbvmi1m158jyl70ndi9gby")))))))