guix_mirror_bot pushed a commit to branch rust-team
in repository guix.

commit e575d791b8e2012a5f01d5182aba6c6d45207534
Author: Hilton Chain <[email protected]>
AuthorDate: Wed Oct 21 18:26:16 2026 +0800

    gnu: rust-webpki-root-certs: Remove compromised certificate.
    
    * gnu/packages/rust-crates.scm (rust-webpki-root-certs-0.26.8)
      (rust-webpki-root-certs-1.0.3, rust-webpki-root-certs-1.0.5)
      (rust-webpki-root-certs-1.0.6, rust-webpki-root-certs-1.0.7)
      (rust-webpki-root-certs-1.0.9) [#:snippet]: Remove compromised certificate
      "emSign ECC Root CA - G3".
    
    Link: https://codeberg.org/guix/guix/issues/11954#issuecomment-25957406
    Link: https://github.com/rustls/webpki-roots/pull/133
---
 gnu/packages/rust-crates.scm | 36 ++++++++++++++++++++++++++++++------
 1 file changed, 30 insertions(+), 6 deletions(-)

diff --git a/gnu/packages/rust-crates.scm b/gnu/packages/rust-crates.scm
index e3b462421d7..4bd1b0dcfff 100644
--- a/gnu/packages/rust-crates.scm
+++ b/gnu/packages/rust-crates.scm
@@ -41889,7 +41889,11 @@ fn main() {
 
 (define rust-webpki-root-certs-0.26.8
   (crate-source "webpki-root-certs" "0.26.8"
-                "1i462gigwj2mfxa7fxa2cvjmz19pr2j37aiz9cs1hb4dbqgxdbh9"))
+                "1i462gigwj2mfxa7fxa2cvjmz19pr2j37aiz9cs1hb4dbqgxdbh9"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-root-certs-1.0.10
   (crate-source "webpki-root-certs" "1.0.10"
@@ -41897,23 +41901,43 @@ fn main() {
 
 (define rust-webpki-root-certs-1.0.3
   (crate-source "webpki-root-certs" "1.0.3"
-                "0vkqczsmad6rr1rc5qnr36f6jqblz9p1xrvv5rv4ps0d93n53mh5"))
+                "0vkqczsmad6rr1rc5qnr36f6jqblz9p1xrvv5rv4ps0d93n53mh5"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-root-certs-1.0.5
   (crate-source "webpki-root-certs" "1.0.5"
-                "1p05rj22vamgs9n34326vypxy3klmdbphqrjrxl3y4cb8309z8in"))
+                "1p05rj22vamgs9n34326vypxy3klmdbphqrjrxl3y4cb8309z8in"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-root-certs-1.0.6
   (crate-source "webpki-root-certs" "1.0.6"
-                "1jm844z3caldlsb4ycb2h7q6vw4awfdgmddmx2sgyxi6mjj1hkw0"))
+                "1jm844z3caldlsb4ycb2h7q6vw4awfdgmddmx2sgyxi6mjj1hkw0"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-root-certs-1.0.7
   (crate-source "webpki-root-certs" "1.0.7"
-                "0b59x5mzsilk42w59nif3lfhc24pgzb0v35pi6p01qy37z7424gk"))
+                "0b59x5mzsilk42w59nif3lfhc24pgzb0v35pi6p01qy37z7424gk"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-root-certs-1.0.9
   (crate-source "webpki-root-certs" "1.0.9"
-                "16qw59hxn1lln1615kb9rjy16pfxd1x8m9f9w6vwv36c5am58rdr"))
+                "16qw59hxn1lln1615kb9rjy16pfxd1x8m9f9w6vwv36c5am58rdr"
+                #:snippet
+                ;; Remove compromised "emSign ECC Root CA - G3".
+                '(substitute* "src/lib.rs"
+                   ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
 
 (define rust-webpki-roots-0.25.4
   (crate-source "webpki-roots" "0.25.4"

Reply via email to