gnu: libxcursor: Replace with 1.1.15 [fixes CVE-2017-16612].
* gnu/packages/xorg.scm (libxcursor-1.1.15): New public variable. (libxcursor)[replacement]: New field.
This commit is contained in:
		
							parent
							
								
									0e7fb0cd9b
								
							
						
					
					
						commit
						4fc61dac3c
					
				
					 1 changed files with 13 additions and 0 deletions
				
			
		|  | @ -5307,6 +5307,7 @@ draggable titlebars and borders.") | ||||||
|   (package |   (package | ||||||
|     (name "libxcursor") |     (name "libxcursor") | ||||||
|     (version "1.1.14") |     (version "1.1.14") | ||||||
|  |     (replacement libxcursor-1.1.15) | ||||||
|     (source |     (source | ||||||
|       (origin |       (origin | ||||||
|         (method url-fetch) |         (method url-fetch) | ||||||
|  | @ -5339,6 +5340,18 @@ draggable titlebars and borders.") | ||||||
|     (description "Xorg Cursor management library.") |     (description "Xorg Cursor management library.") | ||||||
|     (license license:x11))) |     (license license:x11))) | ||||||
| 
 | 
 | ||||||
|  | ;; For CVE-2017-16612. | ||||||
|  | (define-public libxcursor-1.1.15 | ||||||
|  |   (package | ||||||
|  |     (inherit libxcursor) | ||||||
|  |     (version "1.1.15") | ||||||
|  |     (source (origin | ||||||
|  |               (method url-fetch) | ||||||
|  |               (uri (string-append "mirror://xorg/individual/lib/libXcursor-" | ||||||
|  |                                   version ".tar.bz2")) | ||||||
|  |               (sha256 | ||||||
|  |                (base32 | ||||||
|  |                 "0syzlfvh29037p0vnlc8f3jxz8nl55k65blswsakklkwsc6nfki9")))))) | ||||||
| 
 | 
 | ||||||
| (define-public libxt | (define-public libxt | ||||||
|   (package |   (package | ||||||
|  |  | ||||||
		Reference in a new issue