;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2012, 2013 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2014, 2015 Mark H Weaver <mhw@netris.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

;;;
;;; Download a binary file from an external source.
;;;

(use-modules (ice-9 match)
             (web uri)
             (web client)
             (rnrs io ports)
             (srfi srfi-11)
             (guix utils)
             (guix hash))

(define %url-base
  "http://alpha.gnu.org/gnu/guix/bootstrap"

  ;; Alternately:
  ;;"http://www.fdn.fr/~lcourtes/software/guix/packages"
  )

;; XXX: Work around <http://bugs.gnu.org/13095>, present in Guile
;; up to 2.0.7.
(module-define! (resolve-module '(web client))
                'shutdown (const #f))

(define (file-name->uri file)
  "Return the URI for FILE."
  (match (string-tokenize file (char-set-complement (char-set #\/)))
    ((_ ... system basename)
     (string->uri (string-append %url-base "/" system
                                 (match system
                                   ("armhf-linux"
                                    "/20150101/")
                                   (_
                                    "/20131110/"))
                                 basename)))))

(match (command-line)
  ((_ file expected-hash)
   (let ((uri (file-name->uri file)))
     (format #t "downloading file `~a'~%from `~a'...~%"
             file (uri->string uri))
     (let*-values (((resp data) (http-get uri #:decode-body? #f))
                   ((hash)      (bytevector->base16-string (sha256 data)))
                   ((part)      (string-append file ".part")))
       (if (string=? expected-hash hash)
           (begin
             (call-with-output-file part
               (lambda (port)
                 (put-bytevector port data)))
             (rename-file part file))
           (begin
             (format (current-error-port)
                     "file at `~a' has SHA256 ~a; expected ~a~%"
                     (uri->string uri) hash expected-hash)
             (exit 1)))))))
0'>2024-08-31</span></td><td><a href='/guix/commit/gnu/packages/ssh.scm?id=ec292f38958c4be8b518ab37ac0c67f9ed51af18'>gnu: mosh: Add 'bash' input for 'wrap-program'.</a><span class='msg-avail'>...<span class='msg-tooltip'>It is required for cross-compilation.

* gnu/packages/ssh.scm (mosh)[inputs]: Add 'bash-minimal'.

Signed-off-by: Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
Change-Id: I2d03972a6acf31e63e2629356eb862445eecf1aa
</span></span></td><td>Maxime Devos</td></tr>
<tr><td><span title='2024-07-03 11:29:54 -0500'>2024-07-03</span></td><td><a href='/guix/commit/gnu/packages/ssh.scm?id=45f8f97147b60f468ee3ffdfa5ff865ae6cf879f'>gnu: dropbear: Update to 2024.85.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/ssh.scm (dropbear): Update to 2024.85.

Change-Id: I6c729f22732244e6c44bc0d6a1866ab1663a537e
Signed-off-by: jgart &lt;jgart@dismail.de&gt;
</span></span></td><td>Attila Lendvai</td></tr>
<tr><td><span title='2024-07-01 17:51:17 +0800'>2024-07-01</span></td><td><a href='/guix/commit/gnu/packages/ssh.scm?id=6522f93ed098fa13f51f6d017035607e26237d31'>gnu: openssh: Update to 9.8p1 [security fixes].</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes a critical security bug allowing remote code execution as root:
https://www.openssh.com/txt/release-9.8

This may be CVE-2024-6387 (currently embargoed):
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387

* gnu/packages/ssh.scm (openssh): Update to 9.8p1.

Change-Id: I32e1001ca4d7f9bfbdad58ddcba58670e151a8cb
</span></span></td><td>Zheng Junjie</td></tr>