diff options
| author | Efraim Flashner <efraim@flashner.co.il> | 2024-09-19 09:57:10 +0300 |
|---|---|---|
| committer | Efraim Flashner <efraim@flashner.co.il> | 2024-09-19 09:57:10 +0300 |
| commit | 610b395424c02274800d85585cb542ad66d9afea (patch) | |
| tree | 90207e9c3dff4bc79af0d341d644c4bcebc6a5e9 /gnu/packages/xml.scm | |
| parent | 1b6ce1796abdf497f61f426d61339318f4f4f23d (diff) | |
| download | guix-610b395424c02274800d85585cb542ad66d9afea.tar.gz | |
gnu: expat: Fix security vulnerabilities.
Fixes CVE-2024-45490, CVE-2024-45491, CVE-2024-45492. * gnu/packages/xml.scm (expat)[replacement]: New field. (expat/fixed): New variable. * gnu/packages/patches/expat-CVE-2024-45490.patch, gnu/packages/patches/expat-CVE-2024-45491.patch, gnu/packages/patches/expat-CVE-2024-45492.patch: New files. * gnu/local.mk (dist_patch_DATA): Register them. Change-Id: I74d5d7bce98d6c983b989c1afec7cf28777d1617
Diffstat (limited to 'gnu/packages/xml.scm')
| -rw-r--r-- | gnu/packages/xml.scm | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm index 1d54a91130..6fa2183592 100644 --- a/gnu/packages/xml.scm +++ b/gnu/packages/xml.scm @@ -5,7 +5,7 @@ ;;; Copyright © 2015 Sou Bunnbu <iyzsong@gmail.com> ;;; Copyright © 2015, 2016, 2017, 2018, 2020 Ricardo Wurmus <rekado@elephly.net> ;;; Copyright © 2015, 2016, 2017 Mark H Weaver <mhw@netris.org> -;;; Copyright © 2015-2018, 2020-2022 Efraim Flashner <efraim@flashner.co.il> +;;; Copyright © 2015-2018, 2020-2022, 2024 Efraim Flashner <efraim@flashner.co.il> ;;; Copyright © 2015 Raimon Grau <raimonster@gmail.com> ;;; Copyright © 2016 Mathieu Lirzin <mthl@gnu.org> ;;; Copyright © 2016, 2017 Leo Famulari <leo@famulari.name> @@ -125,6 +125,7 @@ the entire document.") (package (name "expat") (version "2.5.0") + (replacement expat/fixed) (source (let ((dot->underscore (lambda (c) (if (char=? #\. c) #\_ c)))) (origin (method url-fetch) @@ -160,6 +161,17 @@ stream-oriented parser in which an application registers handlers for things the parser might find in the XML document (like start tags).") (license license:expat))) +(define-public expat/fixed + (hidden-package + (package + (inherit expat) + (replacement expat/fixed) + (source (origin + (inherit (package-source expat)) + (patches (search-patches "expat-CVE-2024-45490.patch" + "expat-CVE-2024-45491.patch" + "expat-CVE-2024-45492.patch"))))))) + (define-public libebml (package (name "libebml") |