summary refs log tree commit diff
path: root/gnu/local.mk
diff options
context:
space:
mode:
authorJelle Licht <jlicht@fsfe.org>2021-02-16 23:28:58 +0100
committerJelle Licht <jlicht@fsfe.org>2021-02-24 10:29:20 +0100
commit66fa2d318a1e4da3679fa1c5a70cd3972dc0efbf (patch)
treededae60c19ecf043a4d1d0ecb86a92616f390431 /gnu/local.mk
parent5701e85107391733770a76160c77bd0655a4f9c0 (diff)
downloadguix-66fa2d318a1e4da3679fa1c5a70cd3972dc0efbf.tar.gz
gnu: http-parser: Update to 2.9.4-1.ec8b5ee [fixes CVE-2020-8287].
Fixes CVE-2020-8287.

* gnu/packages/web.scm (http-parser): Update to 2.9.4-1.ec8b5ee.
  [source]: Add patch to mitigate CVE.
* gnu/packages/patches/patches/http-parser-CVE-2020-8287.patch: New file.
* gnu/local.mk [dist_patch_DATA]: New patch.
Diffstat (limited to 'gnu/local.mk')
-rw-r--r--gnu/local.mk1
1 files changed, 1 insertions, 0 deletions
diff --git a/gnu/local.mk b/gnu/local.mk
index ae5a65cfcf..ab0c1b0e97 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -1164,6 +1164,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/hdf-eos5-remove-gctp.patch		\
   %D%/packages/patches/hdf-eos5-fix-szip.patch			\
   %D%/packages/patches/hdf-eos5-fortrantests.patch		\
+  %D%/packages/patches/http-parser-CVE-2020-8287.patch		\
   %D%/packages/patches/http-parser-fix-assertion-on-armhf.patch	\
   %D%/packages/patches/hubbub-sort-entities.patch		\
   %D%/packages/patches/hurd-cross.patch				\