gnu: polkit: Incorporate security fix and remove replacement.

* gnu/packages/polkit.scm (polkit-mozjs)[replacement]: Remove.
[source]: Add "polkit-CVE-2021-4034.patch".
(polkit-mozjs/fixed): Remove.
This commit is contained in:
Ludovic Courtès 2022-05-09 15:16:03 +02:00
parent 32a87714f4
commit 69095cde82
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5

View file

@ -54,7 +54,6 @@ (define-public polkit-mozjs
(package
(name "polkit")
(version "0.120")
(replacement polkit-mozjs/fixed)
(source (origin
(method url-fetch)
(uri (string-append
@ -63,7 +62,8 @@ (define-public polkit-mozjs
(sha256
(base32
"00zfg9b9ivkcj2jcf5b92cpvvyljz8cmfwj86lkvy5rihnd5jypf"))
(patches (search-patches "polkit-configure-elogind.patch"))
(patches (search-patches "polkit-configure-elogind.patch"
"polkit-CVE-2021-4034.patch"))
(modules '((guix build utils)))
(snippet
'(begin
@ -147,16 +147,6 @@ (define-public polkit-mozjs
for unprivileged applications.")
(license lgpl2.0+)))
(define-public polkit-mozjs/fixed
(package
(inherit polkit-mozjs)
(version "0.121")
(source (origin
(inherit (package-source polkit-mozjs))
(patches (cons (search-patch "polkit-CVE-2021-4034.patch")
(origin-patches
(package-source polkit-mozjs))))))))
;;; Variant of polkit built with Duktape, a lighter JavaScript engine compared
;;; to mozjs.
(define-public polkit-duktape