HCoop / jackhill / guix / guix.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aae012e) | patch
gnu: zstd: Downgrade to 1.4.4 and make security graft saner.
authorLéo Le Bouter <lle-bout@zaclys.net>
Tue, 30 Mar 2021 00:10:19 +0000 (02:10 +0200)
committerLéo Le Bouter <lle-bout@zaclys.net>
Tue, 30 Mar 2021 00:21:25 +0000 (02:21 +0200)
commit9feef62b73e284e106717a386624d6da90750a3d
tree48886275eeca43c4dc5f4f53d6ca29a5c0c7745etree | snapshot (tar.gz zip)
parentaae012e91e66e3edcc486db7bd4939fb34ed3b24commit | diff
gnu: zstd: Downgrade to 1.4.4 and make security graft saner.

* gnu/packages/patches/zstd-CVE-2021-24031_CVE-2021-24032.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (zstd-1.4.9): Remove.
(zstd/fixed): New variable. Apply patch.
(zstd)[replacement]: Graft with zstd/fixed.
gnu/local.mk diff | blob | blame | history
gnu/packages/compression.scm diff | blob | blame | history
gnu/packages/patches/zstd-CVE-2021-24031_CVE-2021-24032.patch [new file with mode: 0644] blob
jackhill's copy of GNU Guix: https://guix.gnu.org/