summary refs log tree commit diff
path: root/gnu/packages/compression.scm
diff options
context:
space:
mode:
authorLéo Le Bouter <lle-bout@zaclys.net>2021-03-06 02:42:34 +0100
committerLéo Le Bouter <lle-bout@zaclys.net>2021-03-06 02:42:34 +0100
commit6f873731a030dd7ecbd8a5e756b38b26306f6966 (patch)
tree51f9aba58255484fb9da062ffa2ceaa77e11b6e4 /gnu/packages/compression.scm
parent1462a11dbb3d2256c8693e56a583cfd100e27609 (diff)
downloadguix-6f873731a030dd7ecbd8a5e756b38b26306f6966.tar.gz
gnu: zstd: Update to 1.4.9 [security fixes].
Fixes CVE-2021-24031 and CVE-2021-24032.

* gnu/packages/compression.scm (zstd-1.4.9): New variable.
* gnu/packages/compression.scm (zstd): Update to 1.4.9.
[replacement]: Graft with 'zstd-1.4.9'.
Diffstat (limited to 'gnu/packages/compression.scm')
-rw-r--r--gnu/packages/compression.scm14
1 files changed, 14 insertions, 0 deletions
diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm
index 3561dc6bbe..ee7f607dcb 100644
--- a/gnu/packages/compression.scm
+++ b/gnu/packages/compression.scm
@@ -1442,6 +1442,7 @@ or junctions, and always follows hard links.")
                            "v" version "/zstd-" version ".tar.gz"))
        (sha256
         (base32 "05ckxap00qvc0j51d3ci38150cxsw82w7s9zgd5fgzspnzmp1vsr"))))
+    (replacement zstd-1.4.9)
     (build-system gnu-build-system)
     (outputs '("out"                    ;1.2MiB executables and documentation
                "lib"                    ;1.2MiB shared library and headers
@@ -1501,6 +1502,19 @@ speed.")
                    license:public-domain ; zlibWrapper/examples/fitblk*
                    license:zlib))))      ; zlibWrapper/{gz*.c,gzguts.h}
 
+(define-public zstd-1.4.9
+  (package
+    (inherit zstd)
+    (name "zstd")
+    (version "1.4.9")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/facebook/zstd/releases/download/"
+                           "v" version "/zstd-" version ".tar.gz"))
+       (sha256
+        (base32 "14yj7309gsvg39rki4xqnd6w5idmqi0655v1fc0mk1m2kvhp9b19"))))))
+
 (define-public pzstd
   (package
     (name "pzstd")