From 6b433caed2c86bf41acfa65dd507292e8a0ab2ac Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Thu, 11 Jan 2018 15:18:04 -0800 Subject: gnu: transmission: Fix a DNS rebinding vulnerability that allows RCE. * gnu/packages/patches/transmission-fix-dns-rebinding-vuln.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/bittorrent.scm (transmission)[source]: Use it. --- gnu/packages/bittorrent.scm | 1 + 1 file changed, 1 insertion(+) (limited to 'gnu/packages/bittorrent.scm') diff --git a/gnu/packages/bittorrent.scm b/gnu/packages/bittorrent.scm index eca0646200..800a42eea5 100644 --- a/gnu/packages/bittorrent.scm +++ b/gnu/packages/bittorrent.scm @@ -66,6 +66,7 @@ (define-public transmission (uri (string-append "https://transmission.cachefly.net/transmission-" version ".tar.xz")) + (patches (search-patches "transmission-fix-dns-rebinding-vuln.patch")) (sha256 (base32 "0pykmhi7pdmzq47glbj8i2im6iarp4wnj4l1pyvsrnba61f0939s")))) -- cgit v1.2.3