guix/gnu
Leo Famulari b3cc304b30
gnu: poppler: Use an ABI-compatible replacement to fix CVE-2017-9776.
This is a followup to commit 95bbaa02aa.
See <https://bugs.gnu.org/27621> for more information.

Poppler 0.56.0's ABI is not compatible with Poppler 0.52.0, so it's not
possible to graft the newer version in place of the older one.

This change leaves CVE-2017-9775 unfixed for now.

* gnu/packages/patches/poppler-CVE-2017-9776.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/pdf.scm (poppler-0.56.0): Replace with ...
(poppler/fixed): ... new variable.
(poppler)[replacement]: Replaced with poppler/fixed.
2017-07-09 02:25:27 -04:00
..
bootloader gnu: Switch guile-cairo and dependents to Guile 2.2 again. 2017-07-02 22:52:30 +02:00
build build: Add (gnu build file-systems) import. 2017-07-03 16:33:46 +02:00
packages gnu: poppler: Use an ABI-compatible replacement to fix CVE-2017-9776. 2017-07-09 02:25:27 -04:00
services services: Add 'sysctl-service-type'. 2017-07-04 20:40:51 +08:00
system guix system: Add file system label and uuid to iso9660-image. 2017-07-07 18:04:31 +02:00
tests tests: Add extlinux gpt test. 2017-06-21 09:57:12 +02:00
artwork.scm
bootloader.scm bootloader: Use menu-entry to define custom bootloader entries. 2017-06-08 16:29:29 +02:00
local.mk gnu: poppler: Use an ABI-compatible replacement to fix CVE-2017-9776. 2017-07-09 02:25:27 -04:00
packages.scm packages: Add 'specifications->manifest'. 2017-06-11 23:05:23 +02:00
services.scm
system.scm system: Use "@" to refer to the 'shadow' package. 2017-06-30 11:27:30 +02:00
tests.scm