ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2025-01-13 14:40:21 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: libwebp: Replace with 1.3.1. [fixes CVE-2023-1999]

Browse source 
* gnu/packages/image.scm (libwebp/fixed): New variable.
(libwebp)[replacement]: Assign it to new field.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
Hilton Chain 2023-07-17 15:29:03 +08:00 committed by Ludovic Courtès
parent 72ce869690
commit 63cf5a2a4e
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
gnu/packages/image.scm
View file

@ -1432,6 +1432,7 @@ (define-public libwebp
(package (package
(name "libwebp") (name "libwebp")
(version "1.2.4") (version "1.2.4")
(replacement libwebp/fixed)
(source (source
(origin (origin
;; No tarballs are provided for >0.6.1. ;; No tarballs are provided for >0.6.1.
@ -1470,6 +1471,22 @@ (define-public libwebp
channels.") channels.")
(license license:bsd-3))) (license license:bsd-3)))
(define libwebp/fixed
(package
(inherit libwebp)
(name "libwebp")
(version "1.3.1")
(source
(origin
(method git-fetch)
(uri (git-reference
(url "https://chromium.googlesource.com/webm/libwebp")
(commit (string-append "v" version))))
(file-name (git-file-name name version))
(sha256
(base32
"1aas6gwy7kfcq34cil781kcsl286khh9grwcx7k4d2n1g7zcpl3m"))))))
(define-public libmng (define-public libmng
(package (package
(name "libmng") (name "libmng")