me
/
guix
Archived
1
0
Fork 0
Code

gnu: libjpeg-turbo: Replace with 2.0.5 [fixes CVE-2020-13790]. 

* gnu/packages/image.scm (libjpeg-turbo/fixed): New variable.
(libjpeg-turbo)[replacement]: New field.
master
Mark H Weaver 2020-08-03 16:25:55 -04:00
parent 3883fad295
commit 4fe1b2e69e
No known key found for this signature in database
GPG Key ID: 7CEF29847562C516
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
gnu/packages/image.scm
View File

@ -1580,6 +1580,7 @@ is hereby granted."))))
(package
(name "libjpeg-turbo")
(version "2.0.4")
(replacement libjpeg-turbo/fixed)
(source (origin
(method url-fetch)
(uri (string-append "mirror://sourceforge/libjpeg-turbo/"
@ -1636,6 +1637,18 @@ and decompress to 32-bit and big-endian pixel buffers (RGBX, XBGR, etc.).")
license:ijg ;the libjpeg library and associated tools
license:zlib)))) ;the libjpeg-turbo SIMD extensions
(define libjpeg-turbo/fixed
(package
(inherit libjpeg-turbo)
(version "2.0.5")
(source (origin
(method url-fetch)
(uri (string-append "mirror://sourceforge/libjpeg-turbo/"
version "/libjpeg-turbo-" version ".tar.gz"))
(sha256
(base32
"0pbv6pc97kbj7ib31qcwi7lnmm9xg5y3b11aasmkhfjvf7rgdy0n"))))))
(define-deprecated libjpeg libjpeg-turbo)
(export libjpeg)