summary refs log tree commit diff
path: root/gnu/packages/virtualization.scm
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2019-01-29 14:57:29 -0500
committerLeo Famulari <leo@famulari.name>2019-01-31 14:35:48 +0100
commit11d19ca236c62ffdbb98a3a3580caf09cc37b6de (patch)
tree61d5c1a1081dc7a3aa6b75292b73502b7c618249 /gnu/packages/virtualization.scm
parenta382860bd418ef1d8939804a9539747a649ce1db (diff)
downloadguix-11d19ca236c62ffdbb98a3a3580caf09cc37b6de.tar.gz
gnu: QEMU: Fix CVE-2018-16872 and CVE-2019-6778.
* gnu/packages/patches/qemu-CVE-2018-16872.patch,
gnu/packages/patches/qemu-CVE-2019-6778.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/virtualization.scm (qemu)[source]: Use them.
Diffstat (limited to 'gnu/packages/virtualization.scm')
-rw-r--r--gnu/packages/virtualization.scm2
1 files changed, 2 insertions, 0 deletions
diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm
index d178a08413..e98e7eb09e 100644
--- a/gnu/packages/virtualization.scm
+++ b/gnu/packages/virtualization.scm
@@ -110,6 +110,8 @@
              (method url-fetch)
              (uri (string-append "https://download.qemu.org/qemu-"
                                  version ".tar.xz"))
+             (patches (search-patches "qemu-CVE-2018-16872.patch"
+                                      "qemu-CVE-2019-6778.patch"))
              (sha256
               (base32
                "1z5bd5nfyjvhfi1s95labc82y4hjdjjkdabw931362ls0zghh1ba"))))