diff options
| author | Hilton Chain <hako@ultrarare.space> | 2024-12-20 21:19:54 +0800 |
|---|---|---|
| committer | Hilton Chain <hako@ultrarare.space> | 2024-12-21 01:10:01 +0800 |
| commit | 7f91b12fe31baa0838ae2e942d4515911e71b137 (patch) | |
| tree | 7187d1a89016933f6529443efd145c8fc25eddb9 /gnu/packages | |
| parent | fadfd48bc3358c006cc67dbc242030ce1d8d9fb3 (diff) | |
| download | guix-7f91b12fe31baa0838ae2e942d4515911e71b137.tar.gz guix-7f91b12fe31baa0838ae2e942d4515911e71b137.zip | |
gnu: go-filippo-io-age: Update to 1.2.1. [security fix]
age vulnerable to malicious plugin names, recipients, or identities causing
arbitrary binary execution:
https://github.com/advisories/GHSA-32gq-x56h-299c
* gnu/packages/golang-crypto.scm (go-filippo-io-age): Update to 1.2.1.
Change-Id: I62dfffb3ffa5a049c934b48b8bb9d243f4757b12
Diffstat (limited to 'gnu/packages')
| -rw-r--r-- | gnu/packages/golang-crypto.scm | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/gnu/packages/golang-crypto.scm b/gnu/packages/golang-crypto.scm index 0fd96eaa54..96fed6ddcd 100644 --- a/gnu/packages/golang-crypto.scm +++ b/gnu/packages/golang-crypto.scm @@ -124,7 +124,7 @@ can be ignored.") (define-public go-filippo-io-age (package (name "go-filippo-io-age") - (version "1.2.0") + (version "1.2.1") (source (origin (method git-fetch) @@ -133,7 +133,7 @@ can be ignored.") (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1dms32lxqgjipmlisng7dmy1sdw0qscj43x9lmpadyzbzc64lhrv")))) + (base32 "183iqzmdwk4b35vxrdg2gdzd4277yr5bgbgl9brqv3w1dap5v4pm")))) (build-system go-build-system) (arguments (list |