diff options
| author | Mark H Weaver <mhw@netris.org> | 2021-11-06 05:52:51 -0400 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2021-11-12 02:52:46 -0500 |
| commit | 33a80e111096b05af3d60576dfcb2d67099dc60e (patch) | |
| tree | 1bd65ce1572e576b8c1b6282b8cca599de670762 /gnu | |
| parent | 893a31ec20f47b979c1be9fb8b942809228ba4c9 (diff) | |
| download | guix-33a80e111096b05af3d60576dfcb2d67099dc60e.tar.gz | |
gnu: tar: Replace with 1.34 [fixes CVE-2021-20193].
* gnu/packages/base.scm (tar)[replacement]: New field. (tar-1.34): New variable.
Diffstat (limited to 'gnu')
| -rw-r--r-- | gnu/packages/base.scm | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/gnu/packages/base.scm b/gnu/packages/base.scm index ea2e102c15..77731d3720 100644 --- a/gnu/packages/base.scm +++ b/gnu/packages/base.scm @@ -180,6 +180,7 @@ implementation offers several extensions over the standard utility.") (package (name "tar") (version "1.32") + (replacement tar-1.34) (source (origin (method url-fetch) (uri (string-append "mirror://gnu/tar/tar-" @@ -234,6 +235,21 @@ standard utility.") (license gpl3+) (home-page "https://www.gnu.org/software/tar/"))) +(define-public tar-1.34 ; fixes CVE-2021-20193 + (package + (inherit tar) + (version "1.34") + (source (origin + (method url-fetch) + (uri (string-append "mirror://gnu/tar/tar-" + version ".tar.xz")) + (sha256 + (base32 + "0a0x87anh9chbi2cgcyy7pmnm5hzk4yd1w2j8gm1wplwhwkbvgk3")) + (patches + (search-patches "tar-skip-unreliable-tests.patch" + "tar-remove-wholesparse-check.patch")))))) + (define-public patch (package (name "patch") |