Subject: Re: bug#47563: [PATCH v2] gnu: curl: Update to 7.76.0 [security fixes].
From: Leo Famulari <[email-masked]>
To: Léo Le Bouter via Bug reports for GNU Guix <[email-masked]>
Cc: [email-masked],Léo Le Bouter <[email-masked]>
Date: Fri, 2 Apr 2021 16:46:19 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

On Fri, Apr 02, 2021 at 09:33:02PM +0200, Léo Le Bouter via Bug reports for GNU Guix wrote:
> Fixes CVE-2021-22876 and CVE-2021-22890.
> 
> * gnu/packages/patches/curl-7.76-use-ssl-cert-env.patch: New patch.
> * gnu/local.mk (dist_patch_DATA): Register it.
> * gnu/packages/curl.scm (curl/fixed): New variable. Apply patch.
> (curl)[replacement]: Graft.

I tweaked the commit message — committer's preference ;) — and pushed
as f4dc8ac6dfa036d98aa0990ae22268a9650899d0.

Thanks!