diff options
| author | Leo Famulari <leo@famulari.name> | 2018-09-09 17:48:24 -0400 |
|---|---|---|
| committer | Leo Famulari <leo@famulari.name> | 2018-09-09 18:13:19 -0400 |
| commit | ced98c7e89a22c551dd23acd7a1b4f861958d876 (patch) | |
| tree | 86a3675fe38842ae01dac67c6af7bb10b822a57a /gnu/packages/gd.scm | |
| parent | 15cc7e6adfa503a1cf168d19a952fae02f91ab2d (diff) | |
| download | guix-ced98c7e89a22c551dd23acd7a1b4f861958d876.tar guix-ced98c7e89a22c551dd23acd7a1b4f861958d876.tar.gz | |
gnu: libgd: Fix CVE-2018-{5711,1000222}.
* gnu/packages/patches/gd-CVE-2018-1000222.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/gd.scm (gd/fixed): New variable.
* gnu/packages/php.scm (gd-for-php)[source]: Use 'gd-CVE-2018-1000222.patch'.
Diffstat (limited to 'gnu/packages/gd.scm')
| -rw-r--r-- | gnu/packages/gd.scm | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/gnu/packages/gd.scm b/gnu/packages/gd.scm index c374695524..327a1f1545 100644 --- a/gnu/packages/gd.scm +++ b/gnu/packages/gd.scm @@ -39,6 +39,7 @@ (define-public gd (package (name "gd") + (replacement gd/fixed) ;; Note: With libgd.org now pointing to github.com, genuine old ;; tarballs are no longer available. Notably, versions 2.0.x are ;; missing. @@ -91,6 +92,16 @@ most common applications of GD involve website development.") "See COPYING file in the distribution.")) (properties '((cpe-name . "libgd"))))) +(define-public gd/fixed + (hidden-package + (package + (inherit gd) + (source (origin + (inherit (package-source gd)) + (patches (append (origin-patches (package-source gd)) + (search-patches "gd-CVE-2018-5711.patch" + "gd-CVE-2018-1000222.patch")))))))) + (define-public perl-gd (package (name "perl-gd") |