branch master updated: gnu: c-ares: Update to 1.17.1 [fixes CVE-2020-8277].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

lle_bout pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new 674474f  gnu: c-ares: Update to 1.17.1 [fixes CVE-2020-8277].
674474f is described below

commit 674474f646556b1898738dacc9adef29f007d044
Author: Léo Le Bouter <lle-bout@zaclys.net>
AuthorDate: Wed Mar 10 03:52:04 2021 +0100

    gnu: c-ares: Update to 1.17.1 [fixes CVE-2020-8277].
    
    * gnu/packages/adns.scm (c-ares/fixed): New variable.
    (c-ares)[replacement]: Graft.
---
 gnu/packages/adns.scm | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/gnu/packages/adns.scm b/gnu/packages/adns.scm
index 57f3494..b36ec18 100644
--- a/gnu/packages/adns.scm
+++ b/gnu/packages/adns.scm
@@ -74,6 +74,7 @@ scripts.")
               (sha256
                (base32
                 "129sm0wzij0mp8vdv68v18hnykcjb6ivi66wnqnnw598q7bql1fy"))))
+    (replacement c-ares/fixed)
     (build-system gnu-build-system)
     (native-inputs
      `(("pkg-config" ,pkg-config)))
@@ -87,6 +88,23 @@ The primary examples of such applications are servers which 
communicate with
 multiple clients and programs with graphical user interfaces.")
     (license (x11-style "https://c-ares.haxx.se/license.html";))))
 
+(define-public c-ares/fixed
+  (package
+    (inherit c-ares)
+    (name "c-ares")
+    (version "1.17.1")
+    (source (origin
+              (method url-fetch)
+              (uri (string-append
+                    "https://c-ares.haxx.se/download/"; name "-" version
+                    ".tar.gz"))
+              (sha256
+               (base32
+                "0h7wjfnk2092glqcp9mqaax7xx0s13m501z1gi0gsjl2vvvd0gfp"))))
+    (arguments
+     `(;; FIXME: Some tests require network access
+       #:tests? #f))))
+
 ;; gRPC requires a c-ares built with CMake in order to get the .cmake modules.
 ;; We can not build c-ares itself with CMake because that would introduce a
 ;; circular dependency through nghttp2.