[PATCH] gnu: libksba: Update replacement to 1.6.3 [fixes CVE-2022-47629].

Simon Josefsson wrote on 24 Dec 2022 19:21

Recipients:(address . guix-patches@gnu.org)

Message-ID:873594irwe.fsf@josefsson.org

* gnu/packages/gnupg.scm (libksba/fixed): Update to 1.6.3.

---

gnu/packages/gnupg.scm | 4 ++--

1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (23 lines)diff --git a/gnu/packages/gnupg.scm b/gnu/packages/gnupg.scm
index 13b603b64a..ffd5d62a71 100644
--- a/gnu/packages/gnupg.scm
+++ b/gnu/packages/gnupg.scm
@@ -257,14 +257,14 @@ (define-public libksba
 (define libksba/fixed
   (package
     (inherit libksba)
-    (version "1.6.2")
+    (version "1.6.3")
         (source
      (origin
       (method url-fetch)
       (uri (string-append
             "mirror://gnupg/libksba/libksba-" version ".tar.bz2"))
       (sha256
-       (base32 "0wf9j9hlzvgn0vz6zg3fvcmpdr62v8bz1kzsvzdbs4lqqp51rq7w"))))))
+       (base32 "0p6y82j9y6n0l7scjgqhz3as9w13jiqjfx9n2jzynw89nf6wcwiz"))))))
 
 (define-public npth
   (package
-- 
2.38.1

-----BEGIN PGP SIGNATURE-----

iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCY6dDQRQcc2ltb25Aam9z

ZWZzc29uLm9yZwAKCRBRcisI/kdFor+LAQCI7lqTllgCOi4JXc0AlRF2UAPN8U9M

sAtcHEOS/ER4LwD+OAJAoSagDOpw5iU2h5QL7FnjzA2zVqIDOlbk4+o9nAI=

=0hXw

-----END PGP SIGNATURE-----