summary refs log tree commit diff
path: root/gnu/packages/xiph.scm
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2016-03-11 15:52:45 +0100
committerLudovic Courtès <ludo@gnu.org>2016-03-11 16:33:50 +0100
commitef0f0d5f971bf9c7a755b6b5c4bda34fc50e1987 (patch)
treee59390154b2db7f2e4ce7c9c588d16781fc95f09 /gnu/packages/xiph.scm
parentbaacf042fd2b82699e6952a7cee536e8254b5826 (diff)
downloadguix-ef0f0d5f971bf9c7a755b6b5c4bda34fc50e1987.tar.gz
gnu: vorbis-tools: Patch buffer overflow [fixes CVE-2015-6749].
* gnu/packages/patches/vorbis-tools-CVE-2015-6749.patch: New file.
* gnu-system.am (dist_patch_DATA): Add it.
* gnu/packages/xiph.scm (vorbis-tools)[source]: Use it.
Diffstat (limited to 'gnu/packages/xiph.scm')
-rw-r--r--gnu/packages/xiph.scm3
1 files changed, 2 insertions, 1 deletions
diff --git a/gnu/packages/xiph.scm b/gnu/packages/xiph.scm
index a602a34645..04dfd70c5a 100644
--- a/gnu/packages/xiph.scm
+++ b/gnu/packages/xiph.scm
@@ -266,7 +266,8 @@ Kate stream.")
                                 "vorbis-tools-" version ".tar.gz"))
             (sha256
              (base32
-              "1g12bnh5ah08v529y72kfdz5lhvy75iaz7f9jskyby23m9dkk2d3"))))
+              "1g12bnh5ah08v529y72kfdz5lhvy75iaz7f9jskyby23m9dkk2d3"))
+            (patches (list (search-patch "vorbis-tools-CVE-2015-6749.patch")))))
    (build-system gnu-build-system)
    (inputs `(("ao" ,ao)
              ("curl" ,curl)