(name . Guix-patches)(address . guix-patches@gnu.org)
87pn1zfa22.fsf@gmx.com
Hi Guix!
There was a security advisory on dnsmasq recently [0], so here's a patch
to address those by updating to the latest release.
I thought I'd post the patch on here first just in case it's already in
someone's pipeline, in which case I can drop it. If not I can push this
shortly, I assume it's not controversial :-).
Thanks!
Pierre
-----BEGIN PGP SIGNATURE-----
iQFMBAEBCgA2FiEEctU9gYy29KFyWDdMqPyeRH9PfVQFAmAIwFUYHHBpZXJyZS5s
YW5nbG9pc0BnbXguY29tAAoJEKj8nkR/T31U27UIALBjaKCeIymuHzOqtxtRsIzU
bZNuNlBNp2J831gmz0IAaCph7RMrk3EWCpiihhWPU09P1VVfMVFjAoeQpsy76rAL
8dNyFkW1Jcr2vRrTXAEwhnUrTBQmQZuMFXAqQB+eg6f/Ye8eBHjhfAVbfBfo5ObC
K3W9XuLs8eQpB3wsHvZFut4Qf7ORK8bfrmU4rgpYbF+2G4Vdvq++mR3DEKEsBBP3
O2rdJStIwqxWyBTUwlMtwdeLGDtDh8ffgfSaTHVDb2/woj/zxIYH9oZoIP+pL3v6
0EkVgfzf4ibbZjoV4TXXJeQCCrrRpmWBmj1SUt5mtLhVtxcxBdwIOPDKz12kerg=
=ybbP
-----END PGP SIGNATURE-----
From 319503d962de459aa6a357c3efd183d04f3bff6b Mon Sep 17 00:00:00 2001
From: Pierre Langlois <pierre.langlois@gmx.com>
Date: Wed, 20 Jan 2021 23:35:49 +0000
Subject: [PATCH] gnu: dnsmasq: Update to 2.83 [security fixes].
Includes fixes for CVE-2020-25681, CVE-2020-25682, CVE-2020-25683,
CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687.
* gnu/packages/dns.scm (dnsmasq): Update to 2.83.
---
gnu/packages/dns.scm | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
Toggle diff (33 lines)
diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm
index 5bb725ae92..a1ed730f62 100644
--- a/gnu/packages/dns.scm
+++ b/gnu/packages/dns.scm
@@ -13,7 +13,7 @@
;;; Copyright © 2019 Mathieu Othacehe <m.othacehe@gmail.com>
;;; Copyright © 2019 Chris Marusich <cmmarusich@gmail.com>
;;; Copyright © 2019 Rutger Helling <rhelling@mykolab.com>
-;;; Copyright © 2020 Pierre Langlois <pierre.langlois@gmx.com>
+;;; Copyright © 2020, 2021 Pierre Langlois <pierre.langlois@gmx.com>
;;; Copyright © 2020 Arun Isaac <arunisaac@systemreboot.net>
;;; Copyright © 2020 Leo Famulari <leo@famulari.name>
;;; Copyright © 2020 Brice Waegeneire <brice@waegenei.re>
@@ -277,7 +277,7 @@ prompt the user with the option to go with insecure DNS only.")
(define-public dnsmasq
(package
(name "dnsmasq")
- (version "2.82")
+ (version "2.83")
(source (origin
(method url-fetch)
(uri (string-append
@@ -285,7 +285,7 @@ prompt the user with the option to go with insecure DNS only.")
version ".tar.xz"))
(sha256
(base32
- "0cn1xd1s6xs78jmrmwjnh9m6w3q38pk6dyqy2phvasqiyd33cll4"))))
+ "1sjamz1v588qf35m8z6wcqkjk5w12bqhj7d7p48dj8jyn3lgghgz"))))
(build-system gnu-build-system)
(native-inputs
`(("pkg-config" ,pkg-config)))
--
2.30.0