gnu: librsvg: Fix CVE-2019-20446.
* gnu/packages/gnome.scm (librsvg)[replacement]: New field. (librsvg/fixed): New private variable.
This commit is contained in:
parent
3276e12392
commit
23f33de151
1 changed files with 15 additions and 0 deletions
|
@ -2074,6 +2074,7 @@ dealing with different structured file formats.")
|
||||||
|
|
||||||
(define-public librsvg
|
(define-public librsvg
|
||||||
(package
|
(package
|
||||||
|
(replacement "librsvg/fixed")
|
||||||
(name "librsvg")
|
(name "librsvg")
|
||||||
(version "2.40.20")
|
(version "2.40.20")
|
||||||
(source (origin
|
(source (origin
|
||||||
|
@ -2138,6 +2139,20 @@ dealing with different structured file formats.")
|
||||||
library.")
|
library.")
|
||||||
(license license:lgpl2.0+)))
|
(license license:lgpl2.0+)))
|
||||||
|
|
||||||
|
(define librsvg/fixed
|
||||||
|
(package
|
||||||
|
(inherit librsvg)
|
||||||
|
(name "librsvg")
|
||||||
|
(version "2.40.21")
|
||||||
|
(source (origin
|
||||||
|
(method url-fetch)
|
||||||
|
(uri (string-append "mirror://gnome/sources/" name "/"
|
||||||
|
(version-major+minor version) "/"
|
||||||
|
name "-" version ".tar.xz"))
|
||||||
|
(sha256
|
||||||
|
(base32
|
||||||
|
"1fljkag2gr7c4k5mn798lgf9903xslz8h51bgvl89nnay42qjqpp"))))))
|
||||||
|
|
||||||
(define* (computed-origin-method gexp-promise hash-algo hash
|
(define* (computed-origin-method gexp-promise hash-algo hash
|
||||||
#:optional (name "source")
|
#:optional (name "source")
|
||||||
#:key (system (%current-system))
|
#:key (system (%current-system))
|
||||||
|
|
Reference in a new issue