Age | Commit message (Collapse) | Author |
|
Fixes <https://bugs.gnu.org/47212>, <https://bugs.gnu.org/47448>,
<https://bugs.gnu.org/47492>.
* gnu/packages/compression.scm (zziplib/fixed)[arguments]: Add new phase
to create missing library symlinks.
|
|
* gnu/packages/patches/zstd-CVE-2021-24031_CVE-2021-24032.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (zstd-1.4.9): Remove.
(zstd/fixed): New variable. Apply patch.
(zstd)[replacement]: Graft with zstd/fixed.
|
|
* gnu/packages/patches/upx-CVE-2021-20285.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (upx): Apply patch.
|
|
* gnu/packages/compression.scm (pzstd): Use 'package/inherit' over zstd so any
graft applied to zstd cascades onto pzstd which is built from the same
source.
|
|
* gnu/packages/compression.scm (unzip/fixed): Use define instead of
define-public.
|
|
* gnu/packages/compression.scm (gzstream) [arguments]: Add phase 'use-pic.
|
|
* gnu/packages/patches/unzip-32bit-zipbomb-fix.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (unzip/fixed): Apply patch.
|
|
This is what happens when you push without testing your changes :/
* gnu/packages/compression.scm (unzip)[source]: Adjust patch name.
|
|
Non-exhaustively fixes CVE-2016-9844, CVE-2018-1000035, CVE-2018-18384, and
CVE-2019-13232.
* gnu/packages/patches/unzip-COVSCAN-fix-unterminated-string.patch,
gnu/packages/patches/unzip-CVE-2016-9844.patch,
gnu/packages/patches/unzip-CVE-2018-1000035.patch,
gnu/packages/patches/unzip-CVE-2018-18384.patch,
gnu/packages/patches/unzip-case-insensitive.patch,
gnu/packages/patches/unzip-alt-iconv-utf8-print.patch,
gnu/packages/patches/unzip-alt-iconv-utf8.patch,
gnu/packages/patches/unzip-close.patch,
gnu/packages/patches/unzip-exec-shield.patch,
gnu/packages/patches/unzip-fix-recmatch.patch,
gnu/packages/patches/unzip-manpage-fix.patch,
gnu/packages/patches/unzip-overflow.patch,
gnu/packages/patches/unzip-symlink.patch,
gnu/packages/patches/unzip-timestamp.patch,
gnu/packages/patches/unzip-valgrind.patch,
gnu/packages/patches/unzip-x-option.patch,
gnu/packages/patches/unzip-zipbomb-manpage.patch,
gnu/packages/patches/unzip-zipbomb-part1.patch,
gnu/packages/patches/unzip-zipbomb-part2.patch,
gnu/packages/patches/unzip-zipbomb-part3.patch: New patches.
* gnu/local.mk (dist_patch_DATA): Register them.
* gnu/packages/compression.scm (unzip/fixed): New variable. Apply patches.
(unzip)[replacement]: Graft.
|
|
As discussed in
<https://lists.gnu.org/archive/html/guix-devel/2021-03/msg00154.html>, remove
because of unpatched CVE-2020-14315 with no non-FreeBSD patch in sight.
* gnu/packages/compression.scm (bsdiff): Remove.
|
|
It's only a graft added for security so disabling tests on there seems
acceptable.
See: <https://lists.gnu.org/archive/html/guix-devel/2021-03/msg00130.html>.
* gnu/packages/compression.scm (zstd-1.4.9)[arguments]: Substitute keyword
arguments of 'zstd' to disable tests.
|
|
Non-exhaustively, fixes CVE-2018-16548 and CVE-2018-17828.
* gnu/packages/compression.scm (zziplib/fixed): New variable.
(zziplib)[replacement]: Graft.
|
|
* gnu/packages/patches/bsdiff-CVE-2014-9862.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (bsdiff): Apply it.
|
|
* gnu/packages/compression.scm (lrzip): Update to 0.641.
|
|
Fixes CVE-2021-24031 and CVE-2021-24032.
* gnu/packages/compression.scm (zstd-1.4.9): New variable.
* gnu/packages/compression.scm (zstd): Update to 1.4.9.
[replacement]: Graft with 'zstd-1.4.9'.
|
|
* gnu/packages/compression.scm (pigz): Update to 2.6.
|
|
* gnu/packages/compression.scm (clzip): Update to 1.12.
|
|
* gnu/packages/compression.scm (lrzip): Update to 0.640.
[source]: Remove obsolete patch 'lrzip-CVE-2017-8842.patch'.
[inputs]: Add lz4.
* gnu/packages/patches/lrzip-CVE-2017-8842.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
* gnu/packages/compression.scm (xarchiver): Update to 0.5.4.17.
|
|
* gnu/packages/compression.scm (libjcat): Update to 0.1.6.
|
|
* gnu/packages/compression.scm (lunzip): Update to 1.12.
|
|
* gnu/packages/compression.scm (lz4)[arguments]: Set "#:parallel-tests?"
keyword argument to "#f".
Signed-off-by: 宋文武 <iyzsong@member.fsf.org>
|
|
* gnu/packages/compression.scm (tarlz): Update to 0.19.
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>
|
|
* gnu/packages/compression.scm (libjcat): New variable.
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
|
|
* gnu/packages/compression.scm (lzlib): Update to 1.12.
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
|
|
* gnu/packages/compression.scm (zutils): Update to 1.10.
|
|
* gnu/packages/compression.scm (plzip): Update to 1.9.
|
|
* gnu/packages/compression.scm (lziprecover): Update to 1.22.
|
|
* gnu/packages/compression.scm (xarchiver): Update to 0.5.4.16.
|
|
* gnu/packages/compression.scm (google-brotli): Update to 1.0.9.
[source]: Add snippet to remove unrecognized '-R' flag from pkg-config
files.
|
|
* gnu/packages/compression.scm (ziptime): New public variable.
|
|
|
|
* gnu/packages/admin.scm (nmrpflash)[source]: Remove '.git' from URI.
* gnu/packages/aidc.scm (zxing-cpp),
* gnu/packages/assembly.scm (mbuild),
* gnu/packages/audio.scm (opensles, wildmidi, tinyalsa),
* gnu/packages/browser-extensions.scm (ublock-origin-chromium),
* gnu/packages/check.scm (mutest),
* gnu/packages/compression.scm (unshield),
* gnu/packages/coq.scm (subset),
* gnu/packages/dictionaries.scm (translate-shell),
* gnu/packages/disk.scm (memkind),
* gnu/packages/documentation.scm (latex2html),
* gnu/packages/emacs-xyz.scm (emacs-chronometrist,
emacs-flycheck-ledger, emacs-counsel-notmuch, emacs-spaceline,
emacs-org-generate),
* gnu/packages/embedded.scm (ebusd, ebusd-configuration),
* gnu/packages/enchant.scm (nuspell),
* gnu/packages/fontutils.scm (woff2),
* gnu/packages/geo.scm (memphis),
* gnu/packages/gimp.scm (mrg),
* gnu/packages/gnome-xyz.scm (gnome-shell-extension-appindicator),
* gnu/packages/gnome.scm (parlatype),
* gnu/packages/golang.scm (go-github-com-tv42-httpunix,
go-github-com-ayufan-golang-kardianos-service),
* gnu/packages/graphics.scm (eglexternalplatform, egl-wayland, mmm,
directfb, flux),
* gnu/packages/gstreamer.scm (openni2, ccextractor, libvisual,
graphene),
* gnu/packages/guile-xyz.scm (guile-srfi-180, guile-torrent),
* gnu/packages/image.scm (openjpeg-data),
* gnu/packages/java.scm (javacc),
* gnu/packages/language.scm (liblouis, liblouisutdml),
* gnu/packages/linux.scm (pamela, ttyebus),
* gnu/packages/lxqt.scm (lxqt-connman-applet),
* gnu/packages/mail.scm (libetpan),
* gnu/packages/man.scm (ronn),
* gnu/packages/music.scm (tascam-gtk, artyfx),
* gnu/packages/networking.scm (srt, lksctp-tools, nng, nanomsg),
* gnu/packages/python-crypto.scm (pure-python-otr),
* gnu/packages/qt.scm (qtspell),
* gnu/packages/raspberry-pi.scm (raspi-gpio, raspi-open-firmware),
* gnu/packages/rdp.scm (freerdp),
* gnu/packages/ruby.scm (ruby-prawn-templates, ruby-treetop, ruby-gimme,
ruby-standard, ruby-rubocop-ast, ruby-rexml, ruby-range-compressor,
ruby-regexp-property-values, ruby-regexp-parser, ruby-rubocop,
ruby-pdf-reader, ruby-pdf-inspector, ruby-prawn),
* gnu/packages/syncthing.scm (syncthing-gtk),
* gnu/packages/video.scm (svt-hevc, mediasdk, libvideogfx, libde265,
tslib),
* gnu/packages/xml.scm (libxmlb, libxmlplusplus)[source]: Same.
|
|
|
|
* gnu/packages/compression.scm (lz4): Update to 1.9.3.
|
|
* gnu/packages/compression.scm (pzstd)[arguments]: use cc-for-target,
cxx-for-target in make-flags.
[native-inputs]: Only use googletest when compiling natively.
[inputs]: Add googletest when cross compiling.
|
|
* gnu/packages/compression.scm (zstd)[arguments]: When targeting another
system use cc-for-target in make-flags.
|
|
* gnu/packages/compression.scm (bsdiff)[arguments]: Use cc-for-target in
make-flags.
|
|
* gnu/packages/compression.scm (squashfs-tools)[arguments]: Use
cc-for-target in make-flags.
|
|
* gnu/packages/compression.scm (lz4)[arguments]: When targeting another
system use cc-for-target in make-flags.
|
|
|
|
* gnu/packages/compression.scm (atool)[source]: Update to new source URI.
|
|
* gnu/packages/compression.scm (lz4)[outputs]: Add "static" to this new
field.
[arguments]: Replace the ‘delete-static-library’ phase with
‘move-static-library’.
|
|
* gnu/packages/compression.scm (lz4)[arguments]: Use CC-FOR-TARGET.
|
|
* gnu/packages/compression.scm (lzlib)[arguments]: Pass "--disable-static".
|
|
Until now, since lzlib's 'configure' ignores '--host', we'd always end
up building it natively.
* gnu/packages/compression.scm (lzlib)[arguments]: Use (cc-for-target)
instead of "gcc".
|
|
* gnu/packages/compression.scm (tarlz): New variable.
|
|
* gnu/packages/compression.scm (innoextract): Update to 1.9.
[source]: Download from official home page.
[arguments]: Remove obsolete configure flag.
|
|
* gnu/packages/compression.scm (pixz): Update to 1.0.7.
|
|
* gnu/packages/compression.scm (libzip): Update to 1.7.3.
|