From patchwork Wed Mar 20 20:31:59 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Leo Famulari X-Patchwork-Id: 1502 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 4998C16DAD; Wed, 20 Mar 2019 20:33:11 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID, URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTP id ABA3116DAB for ; Wed, 20 Mar 2019 20:33:10 +0000 (GMT) Received: from localhost ([127.0.0.1]:52887 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h6htd-0007Bt-Om for patchwork@mira.cbaines.net; Wed, 20 Mar 2019 16:33:09 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42570) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h6hta-0007BR-RE for guix-patches@gnu.org; Wed, 20 Mar 2019 16:33:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h6htY-0007Dw-Uw for guix-patches@gnu.org; Wed, 20 Mar 2019 16:33:06 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:38665) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1h6htW-0007Bm-To for guix-patches@gnu.org; Wed, 20 Mar 2019 16:33:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1h6htW-0002Fp-Nv for guix-patches@gnu.org; Wed, 20 Mar 2019 16:33:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#34926] [PATCH] gnu: libssh2: Update to 1.8.1 with a graft [security fixes]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 20 Mar 2019 20:33:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 34926 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 34926@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15531139368610 (code B ref -1); Wed, 20 Mar 2019 20:33:02 +0000 Received: (at submit) by debbugs.gnu.org; 20 Mar 2019 20:32:16 +0000 Received: from localhost ([127.0.0.1]:52209 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h6hsm-0002Eo-FA for submit@debbugs.gnu.org; Wed, 20 Mar 2019 16:32:16 -0400 Received: from eggs.gnu.org ([209.51.188.92]:56327) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1h6hsk-0002Ec-QH for submit@debbugs.gnu.org; Wed, 20 Mar 2019 16:32:15 -0400 Received: from lists.gnu.org ([209.51.188.17]:58678) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h6hsf-0006NJ-Cl for submit@debbugs.gnu.org; Wed, 20 Mar 2019 16:32:09 -0400 Received: from eggs.gnu.org ([209.51.188.92]:42475) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1h6hse-00072t-Gk for guix-patches@gnu.org; Wed, 20 Mar 2019 16:32:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1h6hsd-0006Lq-Oc for guix-patches@gnu.org; Wed, 20 Mar 2019 16:32:08 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:57985) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1h6hsd-0006HT-FJ for guix-patches@gnu.org; Wed, 20 Mar 2019 16:32:07 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 2E20121F9B; Wed, 20 Mar 2019 16:32:05 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Wed, 20 Mar 2019 16:32:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; s=mesmtp; bh=YuB/mIMUM9Xbi7N56I2E7+k LiFrIucOiX8xYIkFmuRY=; b=g+UMVBZf+AotTsqUjpuHblNrQBUrE2MhL7IAtGN /5UauMAZCD5FC7zrT6k87A7I6SCMqJe45dsQJFCxBl9H1vLYlR4Sr+GZF9MAz/dr BQYgvY907grAIdefrzPa4t8RPgySlK73zLns8eJVacoZk/zk3wLdonW4JwYU0NxJ ghGg= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:date:from :message-id:mime-version:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=YuB/mIMUM9Xbi7N56 I2E7+kLiFrIucOiX8xYIkFmuRY=; b=XCr/0QZnhciM3ncEbbL1J3DfQxWmuIKln yKL5Gf9SepDdKXl7WISmaddwtjKg6zxjafmPe/nAPs5WHSnW4V00SExDwQx6u+nX LrA+x0KwjW/1dv/xGX/umh3xJcH3D3cj+S0JN1gWB4Pk17kk1Pr7xHXnlT6Rr1Ur UeINTn3Ybdy23v2Kr6teC1/O6z7/rWFGzQh63YJJkYpGexdxIsUDUpvEnJcN+ywW xsHPurYDWLvb3fyvs1KOZJZhTXkra/eScJphz7+lccUI1JnUFvK27DZmpQyhv5gm 26+omMMklGagJu8ZfNwGT6XF8hWoGD8wUyqt0dYVaKmTu4y+DHNXQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedutddrieeigddufeekucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvffufffkofgggfestdekredtre dttdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhi rdhnrghmvgeqnecuffhomhgrihhnpehlihgsshhshhdvrdhorhhgnecukfhppeejiedrud dvgedrvddtvddrudefjeenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhu lhgrrhhirdhnrghmvgenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: from jasmine.lan (c-76-124-202-137.hsd1.pa.comcast.net [76.124.202.137]) by mail.messagingengine.com (Postfix) with ESMTPA id AA6ECE4176 for ; Wed, 20 Mar 2019 16:32:03 -0400 (EDT) From: Leo Famulari Date: Wed, 20 Mar 2019 16:31:59 -0400 Message-Id: <128204645081af4cc1e10f5aef21b9b4e6dc9d81.1553113916.git.leo@famulari.name> X-Mailer: git-send-email 2.21.0 MIME-Version: 1.0 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.51.188.43 X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: "Guix-patches" X-getmail-retrieved-from-mailbox: Patches Fixes CVE-2019-{3855,3856,3857,3858,3859,3860,3861,3862,3863}. --- gnu/packages/ssh.scm | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index dc81736f06..ec81844b93 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -111,6 +111,7 @@ applications.") (define-public libssh2 (package (name "libssh2") + (replacement libssh2-1.8.1) (version "1.8.0") (source (origin (method url-fetch) @@ -143,6 +144,21 @@ a server that supports the SSH-2 protocol.") (license license:bsd-3) (home-page "https://www.libssh2.org/"))) +(define-public libssh2-1.8.1 + (package + (inherit libssh2) + (version "1.8.1") + (source (origin + (method url-fetch) + (uri (string-append + "https://www.libssh2.org/download/libssh2-" + version ".tar.gz")) + (sha256 + (base32 + "0ngif3ynk6xqzy5nlfjs7bsmfm81g9f145av0z86kf0vbgrigda0")) + (patches + (search-patches "libssh2-fix-build-failure-with-gcrypt.patch")))))) + (define-public openssh (package (name "openssh")