summaryrefslogtreecommitdiff
path: root/gnu/packages/mp3.scm
diff options
context:
space:
mode:
authorKei Kebreau <kkebreau@posteo.net>2021-03-16 12:03:12 -0400
committerLéo Le Bouter <lle-bout@zaclys.net>2021-03-16 19:12:36 +0100
commit109f58444beecd1b9b7c502f2a687a6b91c62dc0 (patch)
tree2c9bb1d301f675703a11a01cf69be76b7be8ff29 /gnu/packages/mp3.scm
parent82a9538ea01596a57bf642d729500f15bcd17f84 (diff)
downloadguix-109f58444beecd1b9b7c502f2a687a6b91c62dc0.tar.gz
guix-109f58444beecd1b9b7c502f2a687a6b91c62dc0.tar.xz
gnu: mpg321: Fix CVE-2019-14247.
* gnu/packages/patches/mpg321-CVE-2019-14247.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/mp3.scm (mpg321)[source]: Apply it. Signed-off-by: Léo Le Bouter <lle-bout@zaclys.net> Signed-off-by: Leo Famulari <leo@famulari.name>
Diffstat (limited to 'gnu/packages/mp3.scm')
-rw-r--r--gnu/packages/mp3.scm4
1 files changed, 3 insertions, 1 deletions
diff --git a/gnu/packages/mp3.scm b/gnu/packages/mp3.scm
index 34390d3696..dba3e17558 100644
--- a/gnu/packages/mp3.scm
+++ b/gnu/packages/mp3.scm
@@ -408,7 +408,9 @@ command-line tool as well as a C library, libmpg123.")
version "/mpg321-" version ".tar.gz"))
(sha256
(base32
- "0ki8mh76bbmdh77qsiw682dvi8y468yhbdabqwg05igmwc1wqvq5"))))
+ "0ki8mh76bbmdh77qsiw682dvi8y468yhbdabqwg05igmwc1wqvq5"))
+ (patches
+ (search-patches "mpg321-CVE-2019-14247.patch"))))
(build-system gnu-build-system)
(arguments '(#:configure-flags '("--disable-alsa")))
(inputs