summary refs log tree commit diff
diff options
context:
space:
mode:
authorMarius Bakke <marius@gnu.org>2020-09-27 20:55:54 +0200
committerMarius Bakke <marius@gnu.org>2020-09-28 00:46:21 +0200
commit9f89779e1fcb5412b9274189dfe89f810d4f6fe5 (patch)
tree0f278d89673ac3fb0ed028039a006841b1dacf04
parent7d366a8387a57badca220eb93a207ad47b719111 (diff)
downloadguix-9f89779e1fcb5412b9274189dfe89f810d4f6fe5.tar.gz
gnu: libspiro: Replace with 20200505 [fixes CVE-2019-19847].
* gnu/packages/fontutils.scm (libspiro)[replacement]: New field.
(libspiro-20200505): New variable.
-rw-r--r--gnu/packages/fontutils.scm14
1 files changed, 14 insertions, 0 deletions
diff --git a/gnu/packages/fontutils.scm b/gnu/packages/fontutils.scm
index 94473991f7..b3852fe093 100644
--- a/gnu/packages/fontutils.scm
+++ b/gnu/packages/fontutils.scm
@@ -556,6 +556,7 @@ using the above tables.")
   (package
     (name "libspiro")
     (version "20190731")
+    (replacement libspiro-20200505)
     (source
      (origin
       (method url-fetch)
@@ -574,6 +575,19 @@ smooth contours with constant curvature at the spline joins.")
     (license license:gpl2+)
     (home-page "http://libspiro.sourceforge.net/")))
 
+(define libspiro-20200505
+  (package
+    (inherit libspiro)
+    (version "20200505")
+    (source
+     (origin
+      (method url-fetch)
+      (uri (string-append "https://github.com/fontforge/libspiro/releases"
+                          "/download/" version "/libspiro-dist-" version ".tar.gz"))
+      (sha256
+       (base32
+        "0j8fmyj4wz6mqk17dqs6f8jx0i52n68gv5px17qbrjnbilg9mih6"))))))
+
 (define-public libuninameslist
   (package
     (name "libuninameslist")