* gnu/packages/patches/mpg321-CVE-2019-14247.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/mp3.scm (mpg321)[source]: Apply it.
Signed-off-by: Léo Le Bouter <lle-bout@zaclys.net>
Signed-off-by: Leo Famulari <leo@famulari.name>
This switches to a yet unreleased version of taglib, to make sure long
standings issues and CVEs are covered until a proper release is made
upstream.
Among these, we have:
- CVE-2017-12678
- CVE-2018-11439
- https://github.com/taglib/taglib/issues/864
* gnu/packges/mp3.scm (taglib): Update to 1.12-beta-1.
[source]: Switch to using git-fetch.
* gnu/packages/patches/id3lib-UTF16-writing-bug.patch: New file.
* gnu/packages/mp3.scm (id3lib)[source](patches): Add it.
* gnu/local.mk (dist_patch_DATA): Add it.
Signed-off-by: Danny Milosavljevic <dannym@scratchpost.org>