mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2024-12-24 13:28:12 -05:00
gnu: file: Add 5.20 as a replacement--fixes CVE-2014-3710.
* gnu/packages/file.scm (file)[replacement]: New field. (file/fixed): New variable.
This commit is contained in:
parent
7f614a747c
commit
3940c5cab3
1 changed files with 13 additions and 0 deletions
|
@ -26,6 +26,7 @@ (define-module (gnu packages file)
|
|||
|
||||
(define-public file
|
||||
(package
|
||||
(replacement file/fixed)
|
||||
(name "file")
|
||||
(version "5.19")
|
||||
(source (origin
|
||||
|
@ -44,3 +45,15 @@ (define-public file
|
|||
of the file.")
|
||||
(license bsd-2)
|
||||
(home-page "http://www.darwinsys.com/file/")))
|
||||
|
||||
(define file/fixed ;fix for CVE-2014-3710
|
||||
(let ((real-version "5.20"))
|
||||
(package (inherit file)
|
||||
(source (origin
|
||||
(method url-fetch)
|
||||
(uri (string-append "ftp://ftp.astron.com/pub/file/file-"
|
||||
real-version ".tar.gz"))
|
||||
(sha256
|
||||
(base32
|
||||
"0iyjs9z8kp43gz7gva4j67h4p0n53f7q8x3ibai9s01sp3xnphsv"))))
|
||||
(replacement #f))))
|
||||
|
|
Loading…
Reference in a new issue