summary refs log tree commit diff
path: root/gnu/packages/gnupg.scm
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2018-06-09 17:39:14 -0400
committerLeo Famulari <leo@famulari.name>2018-06-09 17:50:03 -0400
commit65956ad3526ba09e1f7a40722c96c6ef7c0936fe (patch)
tree22641186b97096fc27ac772758df417935c6fcb4 /gnu/packages/gnupg.scm
parent5aa4ea6a2baf3d25f920c4c706a1b6d99f68ae27 (diff)
downloadguix-65956ad3526ba09e1f7a40722c96c6ef7c0936fe.tar.gz
gnu: GnuPG 1.4: Fix CVE-2018-12020.
* gnu/packages/patches/gnupg-1.4-CVE-2018-12020.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/gnupg.scm (gnupg-1)[source]: Use it.
Diffstat (limited to 'gnu/packages/gnupg.scm')
-rw-r--r--gnu/packages/gnupg.scm1
1 files changed, 1 insertions, 0 deletions
diff --git a/gnu/packages/gnupg.scm b/gnu/packages/gnupg.scm
index 7b66ee479d..42b54c1ea0 100644
--- a/gnu/packages/gnupg.scm
+++ b/gnu/packages/gnupg.scm
@@ -354,6 +354,7 @@ libskba (working with X.509 certificates and CMS data).")
               (method url-fetch)
               (uri (string-append "mirror://gnupg/gnupg/gnupg-" version
                                   ".tar.bz2"))
+              (patches (search-patches "gnupg-1.4-CVE-2018-12020.patch"))
               (sha256
                (base32
                 "1d1hz4szh1kvwhsw7w2zxa6q5ndrk3qy6hj289l1b8k3xi5s554m"))))