summary refs log tree commit diff
path: root/gnu
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2021-08-02 21:40:37 -0400
committerLeo Famulari <leo@famulari.name>2021-07-27 12:34:57 -0400
commitfdd2f57359cb01b2a867aaff88b86989597c2953 (patch)
tree508a39b8ec7bfe5c382911abef4af261dcdc062b /gnu
parent1e16e1938c76090447850ed31d31b9e05e2c85bd (diff)
downloadguix-fdd2f57359cb01b2a867aaff88b86989597c2953.tar.gz
gnu: mit-krb5: Update to 1.18.4 [fixes CVE-2021-36222].
* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
(mit-krb5-1.18.4): New variable.
Diffstat (limited to 'gnu')
-rw-r--r--gnu/packages/kerberos.scm23
1 files changed, 23 insertions, 0 deletions
diff --git a/gnu/packages/kerberos.scm b/gnu/packages/kerberos.scm
index 20ed94b33b..92cc84b673 100644
--- a/gnu/packages/kerberos.scm
+++ b/gnu/packages/kerberos.scm
@@ -52,6 +52,7 @@
 (define-public mit-krb5
   (package
     (name "mit-krb5")
+    (replacement mit-krb5-1.18.4)
     (version "1.18")
     (source (origin
               (method url-fetch)
@@ -119,6 +120,28 @@ cryptography.")
     (home-page "https://web.mit.edu/kerberos/")
     (properties '((cpe-name . "kerberos")))))
 
+(define-public mit-krb5-1.18.4
+  ;; Hide the package to avoid displaying the confusing "1.1a" version in the
+  ;; user interface.
+  (hidden-package
+    (package
+      (inherit mit-krb5)
+      ; version 1.18.4
+      (version "1.1a")
+      (source (origin
+                (method url-fetch)
+                (uri (list
+                       (string-append "https://web.mit.edu/kerberos/dist/krb5/"
+                                      "1.18"
+                                      "/krb5-1.18.4.tar.gz")
+                       (string-append "https://kerberos.org/dist/krb5/"
+                                      "1.18"
+                                      "/krb5-1.18.4.tar.gz")))
+                (patches (search-patches "mit-krb5-hurd.patch"))
+                (sha256
+                  (base32
+                    "1j4zm5npv3yxrwrsdwlxias0ycj4qfxzgnz0h9zffla7b4pmw236")))))))
+
 (define-public shishi
   (package
     (name "shishi")