On Fri, Apr 02, 2021 at 09:33:02PM +0200, Léo Le Bouter via Bug reports for GNU Guix wrote: > Fixes CVE-2021-22876 and CVE-2021-22890. > > * gnu/packages/patches/curl-7.76-use-ssl-cert-env.patch: New patch. > * gnu/local.mk (dist_patch_DATA): Register it. > * gnu/packages/curl.scm (curl/fixed): New variable. Apply patch. > (curl)[replacement]: Graft.
I tweaked the commit message — committer's preference ;) — and pushed as f4dc8ac6dfa036d98aa0990ae22268a9650899d0. Thanks!
signature.asc
Description: PGP signature
