aboutsummaryrefslogtreecommitdiff
path: root/gnu/packages/patches
Commit message (Collapse)AuthorAge
* gnu: evince: Fix CVE-2017-1000083.Marius Bakke2017-07-13
| | | | | | * gnu/packages/patches/evince-CVE-2017-1000083.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gnome.scm (evince)[source]: Use it.
* gnu: spice: Fix CVE-2017-7506.Leo Famulari2017-07-12
| | | | | | * gnu/packages/patches/spice-CVE-2017-7506.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/spice.scm (spice)[source]: Use it.
* gnu: hop: Update to 3.1.0-pre2.Kei Kebreau2017-07-10
| | | | | | | | | | * gnu/packages/scheme.scm (hop): Update to 3.1.0-pre2. [source]: Remove unnecessary patch. [arguments]: Enable tests; disable parallel building; specify BIGLOO in make-flags. [inputs]: Add libgc, libunistring, libuv, pcre and sqlite. * gnu/local.mk (dist_patch_DATA): Remove unnecessary patch. * gnu/packages/patches/hop-linker-flags.patch: Delete file.
* gnu: bigloo: Update to 4.3a.Kei Kebreau2017-07-10
| | | | | | | * gnu/packages/scheme.scm (bigloo): Update to 4.3a. [source]: Remove old patch. Add snippet. [arguments]: Adjust the build phases accordingly. [inputs]: Add libgc, libunistring, libuv, openssl, pcre and sqlite.
* gnu: libtiff: Fix two integer overflows.Leo Famulari2017-07-10
| | | | | | | | * gnu/packages/patches/libtiff-tiffycbcrtorgb-integer-overflow.patch, gnu/packages/patches/libtiff-tiffycbcrtorgbinit-integer-overflow.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use them.
* gnu: ncurses: Fix CVE-2017-10684 and CVE-2017-10685.Leo Famulari2017-07-10
| | | | | | | * gnu/packages/patches/ncurses-CVE-2017-10684-10685.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/ncurses.scm (ncurses)[replacement]: New field. (ncurses/fixed): New variable.
* gnu: poppler: Fix null pointer dereferences.Mark H Weaver2017-07-10
| | | | | | | * gnu/packages/patches/poppler-fix-crash-with-broken-documents.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/pdf.scm (poppler/fixed)[source]: Add the patch.
* gnu: dblatex: Use texlive-union.Ricardo Wurmus2017-07-09
| | | | | | | * gnu/packages/patches/dblatex-remove-multirow.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/docbook.scm (dblatex)[source]: Use patch. [inputs]: Replace "texlive" with a texlive-union.
* gnu: poppler: Use an ABI-compatible replacement to fix CVE-2017-9776.Leo Famulari2017-07-09
| | | | | | | | | | | | | | | | This is a followup to commit 95bbaa02aa63bc5eae36f686f1ed9915663aa4cf. See <https://bugs.gnu.org/27621> for more information. Poppler 0.56.0's ABI is not compatible with Poppler 0.52.0, so it's not possible to graft the newer version in place of the older one. This change leaves CVE-2017-9775 unfixed for now. * gnu/packages/patches/poppler-CVE-2017-9776.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/pdf.scm (poppler-0.56.0): Replace with ... (poppler/fixed): ... new variable. (poppler)[replacement]: Replaced with poppler/fixed.
* gnu: blast+: Update to 2.6.0.Ben Woodcroft2017-07-08
| | | | | | | | | * gnu/packages/bioinformatics.scm (blast+): Update to 2.6.0. [origin]: Remove bundled pcre. Add patch. [arguments]: Replace paths in run_with_lock.c. Configure with pcre. [inputs]: Add pcre, perl, python. * gnu/packages/patches/blast+-fix-makefile.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it.
* gnu: python-pyopenssl: Fix test failure on 32-bit platforms.Marius Bakke2017-07-07
| | | | | | * gnu/packages/patches/python-pyopenssl-17.1.0-test-overflow.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/python.scm (python-pyopenssl)[source]: Use it.
* gnu: libtiff: Fix CVE-2017-{9936,10688}.Alex Vong2017-07-07
| | | | | | | | | * gnu/packages/patches/libtiff-CVE-2017-9936.patch, gnu/packages/patches/libtiff-CVE-2017-10688.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use them. Signed-off-by: Leo Famulari <leo@famulari.name>
* gnu: xorg-server: Fix CVE-2017-{10971,10972}.Kei Kebreau2017-07-06
| | | | | | | | | * gnu/packages/patches/xorg-server-CVE-2017-10971.patch, gnu/packages/patches/xorg-server-CVE-2017-10972.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/xorg.scm (xorg-server)[source]: Use them. Signed-off-by: Leo Famulari <leo@famulari.name>
* gnu: gemma: Fix building on non-Intel architectures.Efraim Flashner2017-07-04
| | | | | | | * gnu/packages/patches/gemma-intel-compat.patch: New file. * gnu/packages/bioinformatics.scm (gemma)[source]: Add patch. [arguments]: Add NO_INTEL_COMPAT flag on non-Intel architectures. * gnu/local.mk (dist_patch_DATA): Register patch.
* gnu: gajim: Update to 0.16.8.Arun Isaac2017-07-04
| | | | | | | * gnu/packages/messaging.scm (gajim): Update to 0.16.8. [source]: Remove patch. * gnu/packages/patches/gajim-CVE-2016-10376.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: python-pyopenssl: Update to 17.1.0.Marius Bakke2017-07-04
| | | | | | | | | | * gnu/packages/python.scm (python-pyopenssl, python2-pyopenssl): Update to 17.1.0. [source]: Remove patch. [native-inputs]: Add PYTHON-PRETEND. [arguments]<#:phases>: Disable the network test here instead of via a patch. Also disable one new test. * gnu/packages/patches/python-pyopenssl-skip-network-test.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: gcr: Correct patch.Kei Kebreau2017-07-03
| | | | | | | * gnu/packages/patches/gcr-disable-failing-tests.patch: Correct erroneously committed file. This is a follow-up to commit 85c774808fc13a0adc603784b2358a7c285c4822.
* gnu: gcr: Enable working tests.Kei Kebreau2017-07-03
| | | | | | | | | * gnu/packages/patches/gcr-disable-failing-tests.patch, gnu/packages/patches/gcr-fix-collection-tests-to-work-with-gpg-21.patch: New files. * gnu/local.mk (dist_patch_DATA): Add patches. * gnu/packages/gnome.scm (gcr)[source]: Use patches. [arguments]: Enable tests.
* gnu: Switch guile-cairo and dependents to Guile 2.2 again.Ludovic Courtès2017-07-02
| | | | | | | | | | | | | | | | | | | | Fixes <https://bugs.gnu.org/27551>. Reported by Leo Famulari <leo@famulari.name>. This reinstates the following commits: e3ddb1e83 * gnu: guile-cairo: Switch to Guile 2.2. ae5c6ef39 * gnu: guile-gnome: Update to 2.16.5. 0fd8013fc * gnu: guile-rsvg: Update to commit 05c6a2fd. 66b9183c4 * gnu: guile-lib: Switch to Guile 2.2. and adds the following changes: * gnu/bootloader/grub.scm (svg->png): Add 'package->derivation' call for GUILE-2.2. Pass #:guile-for-build to 'gexp->derivation'. * gnu/build/svg.scm (svg->png): Add 'em' and 'ex' to the 'let-values' form to account for all the values returned by 'rsvg-handle-get-dimensions', which Guile 2.2 does not truncate.
* Revert "gnu: guile-rsvg: Update to commit 05c6a2fd."Leo Famulari2017-07-01
| | | | This reverts commit 0fd8013fcaafa9f53c7e304b2573c0314471df89.
* gnu: guile-rsvg: Update to commit 05c6a2fd.Ludovic Courtès2017-06-30
| | | | | | | | * gnu/packages/gtk.scm (guile-rsvg): Update to commit 05c6a2fd. [source](url): Change to gitlab.com. (snippet): Use @GUILE_EFFECTIVE_VERSION@ instead of "2.0". * gnu/packages/patches/guile-rsvg-pkgconfig.patch: Use "$GUILE_EFFECTIVE_VERSION" instead of "2.0".
* gnu: ansible: Apply experimental patch to deal with wrapping of ansible script.Jelle Licht2017-06-29
| | | | | | | | | | | See <http://lists.gnu.org/archive/html/bug-guix/2017-05/msg00015.html> for the rationale. * gnu/packages/patches/ansible-wrap-program-hack.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/admin.scm (ansible)[source]: Use it. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu: screen: Update to 4.6.0.Eric Bavier2017-06-28
| | | | | | | * gnu/packages/screen.scm (screen): Update to 4.6.0. [source]: Remove patch. * gnu/packages/patches/screen-fix-info-syntax-error.patch: Delete patch. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: Add quagga.Gábor Boskovits2017-06-26
| | | | | | | | * gnu/packages/networking.scm (quagga): New variable. * gnu/packages/patches/quagga-reproducible-build.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. Signed-off-by: Marius Bakke <mbakke@fastmail.com>
* gnu: glibc: Fix replacement on i686.Mark H Weaver2017-06-25
| | | | | | | | | | | | | This is followup to 665d6a59161769e10b52ffcbcd5cd2db22f32681. Fixes <https://bugs.gnu.org/27489>. * gnu/packages/base.scm (glibc-2.25-patched, glibc-2.24, glibc-2.23) (glibc-2.22): Add glibc-vectorized-strcspn-guards.patch to patches. Move a comment where it belongs. * gnu/packages/patches/glibc-CVE-2017-1000366-pt2.patch: Swap with ... * gnu/packages/patches/glibc-CVE-2017-1000366-pt3.patch: ... this. * gnu/packages/patches/glibc-vectorized-strcspn-guards.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. Fix formatting.
* gnu: Remove libwmf.Leo Famulari2017-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | This package contains many security vulnerabilities and is no longer maintained upstream. See this discussion for more information: https://lists.gnu.org/archive/html/guix-devel/2017-05/msg00478.html * gnu/packages/image.scm (libwmf): Remove variable. * gnu/packages/wv.scm (wv)[inputs]: Remove libwmf. [arguments]: Remove field. * gnu/packages/abiword.scm (abiword)[inputs]: Remove libwmf. [source]: Remove patch 'abiword-wmf-version-lookup-fix.patch'. * gnu/packages/patches/abiword-wmf-version-lookup-fix.patch, gnu/packages/patches/libwmf-CAN-2004-0941.patch, gnu/packages/patches/libwmf-CVE-2006-3376.patch, gnu/packages/patches/libwmf-CVE-2007-0455.patch, gnu/packages/patches/libwmf-CVE-2007-2756.patch, gnu/packages/patches/libwmf-CVE-2007-3472.patch, gnu/packages/patches/libwmf-CVE-2007-3473.patch, gnu/packages/patches/libwmf-CVE-2007-3477.patch, gnu/packages/patches/libwmf-CVE-2009-1364.patch, gnu/packages/patches/libwmf-CVE-2009-3546.patch, gnu/packages/patches/libwmf-CVE-2015-0848+CVE-2015-4588.patch, gnu/packages/patches/libwmf-CVE-2015-4695.patch, gnu/packages/patches/libwmf-CVE-2015-4696.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them.
* gnu: glibc: Add mitigations for CVE-2017-1000366.Efraim Flashner2017-06-24
| | | | | | | | | | | | | | * gnu/packages/base.scm (glibc/linux)[replacement]: New field. (glibc-2.25-patched): New variable. (glibc-2.24, glibc-2.23, glibc-2.22, glibc-2.21)[source]: Add patches. [replacement]: New field. (glibc-locales)[replacement]: New field. * gnu/packages/patches/glibc-CVE-2017-1000366-pt1.patch, gnu/packages/patches/glibc-CVE-2017-1000366-pt2.patch, gnu/packages/patches/glibc-CVE-2017-1000366-pt3.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. Modified-By: Mark H Weaver <mhw@netris.org>
* gnu: qemu: Fix CVE-2017-9524.Leo Famulari2017-06-23
| | | | | | * gnu/packages/patches/qemu-CVE-2017-9524.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/qemu.scm (qemu)[source]: Use it.
* gnu: Update calibre to 3.0.0.Roel Janssen2017-06-22
| | | | | | * gnu/local.mk: Remove patch. * gnu/packages/ebook.scm (calibre): Update to 3.0.0. * gnu/packages/patches/calibre-dont-load-remote-icons.patch: Remove file.
* gnu: exim: Fix CVE-2017-1000369.Leo Famulari2017-06-19
| | | | | | * gnu/packages/patches/exim-CVE-2017-1000369.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/mail.scm (exim)[source]: Use it.
* gnu: miniupnpc: Update to 2.0.20170509.Marius Bakke2017-06-18
| | | | | | | * gnu/packages/upnp.scm (miniupnpc): Update to 2.0.20170509. [source]: Remove obsolete patch. * gnu/packages/patches/miniupnpc-CVE-2017-8798.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: gspell: Update to 1.4.1.Kei Kebreau2017-06-15
| | | | | * gnu/packages/gnome.scm (gspell): Update to 1.4.1. * gnu/packages/patches/gspell-dash-test.patch: Adjust accordingly.
* gnu: libtiff: Fix several bugs related to improper codec usage [security fixes].Leo Famulari2017-06-15
| | | | | | | | | Fixes CVE-2014-8128, CVE-2015-7554, CVE-2016-5318, CVE-2016-10095, and the other bugs listed in 'libtiff-tiffgetfield-bugs.patch'. * gnu/packages/patches/libtiff-tiffgetfield-bugs.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use it.
* gnu: zziplib: Fix CVE-2017-{5974,5975,5976,5978,5979,5981}.Leo Famulari2017-06-15
| | | | | | | | | | | * gnu/packages/patches/zziplib-CVE-2017-5974.patch, gnu/packages/patches/zziplib-CVE-2017-5975.patch, gnu/packages/patches/zziplib-CVE-2017-5976.patch, gnu/packages/patches/zziplib-CVE-2017-5978.patch, gnu/packages/patches/zziplib-CVE-2017-5979.patch, gnu/packages/patches/zziplib-CVE-2017-5981.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/zip.scm (zziplib)[source]: Use them.
* gnu: Add propeller-gcc-4.Ricardo Wurmus2017-06-15
| | | | | | * gnu/packages/embedded.scm (propeller-gcc-4): New variable. * gnu/packages/patches/gcc-4.6-gnu-inline.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it.
* gnu: osip: Fix CVE-2017-7853.Leo Famulari2017-06-14
| | | | | | * gnu/packages/patches/osip-CVE-2017-7853.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/telephony.scm (osip)[source]: Use it.
* gnu: guile-ssh: Close RREPL channel ports before they are finalized.Ludovic Courtès2017-06-13
| | | | | | | | Partly fixes <https://bugs.gnu.org/26976>. * gnu/packages/patches/guile-ssh-channel-finalization.patch: New file. * gnu/packages/ssh.scm (guile-ssh)[source](patches): Use it. * gnu/local.mk (dist_patch_DATA): Add it.
* gnu: nss, nss-certs: Update to 3.31.Marius Bakke2017-06-12
| | | | | | | | | | | | | Release notes: <https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes> * gnu/packages/certs.scm (nss-certs): Update to 3.31. * gnu/packages/gnuzilla.scm (nss): Likewise. [source]<patches>: Remove upstream 'nss-disable-long-b64-tests' patch. [arguments]<#:phases>: Move armhf timeout substitution ... * gnu/packages/patches/nss-increase-test-timeout.patch: ... here. * gnu/packages/patches/nss-disable-long-b64-tests.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: crawl: Fix savegame upgrades.nee2017-06-12
| | | | | | | | * gnu/packages/patches/crawl-upgrade-saves.patch: New file. * gnu/local.mk (dist_patch_DATA): Add patch. * gnu/packages/games.scm (crawl)[source]: Apply patch. Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>
* gnu: libmwaw: Fix CVE-2017-9433.Leo Famulari2017-06-12
| | | | | | * gnu/packages/patches/libmwaw-CVE-2017-9433.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/libreoffice.scm (libmwaw)[source]: Use it.
* gnu: libextractor: Update to 1.4.Marius Bakke2017-06-11
| | | | | | | * gnu/packages/gnunet.scm (libextractor): Update to 1.4. [source]: Remove obsolete patch and snippet. * gnu/packages/patches/libextractor-ffmpeg-3.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: gnutls: Replace with 3.5.13.Marius Bakke2017-06-11
| | | | | | | | | | | | | | | | This update addresses the following security advisories: GNUTLS-SA-2017-3 (aka CVE-2017-7869) and GNUTLS-SA-2017-4. See <https://gnutls.org/security.html> and <https://gnutls.org/news.html>. * gnu/packages/patches/gnutls-skip-pkgconfig-test.patch, gnu/packages/patches/gnutls-skip-trust-store-test.patch: New files. * gnu/local.mk (dist_patch_DATA): Register patches. * gnu/packages/tls.scm (gnutls)[replacement]: New field. (gnutls-3.5.13): New variable. (gnutls/guile-2.2)[replacement]: New field. Set #f. [source]: Inherit from GNUTLS-3.5.13.
* gnu: raptor2: Fix heap overflow bug.Marius Bakke2017-06-09
| | | | | | * gnu/packages/patches/raptor2-heap-overflow.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/rdf.scm (raptor2): Use it.
* gnu: artanis: Update to 0.2.1.Ludovic Courtès2017-06-08
| | | | | | | | | * gnu/packages/guile.scm (artanis): Update to 0.2.1. [inputs]: Switch to GUILE-2.2. [arguments]: Adjust #:make-flags for Guile 2.2. Take .go files from lib/guile/2.2. Add 'wrap-art' phase. * gnu/packages/patches/artanis-fix-Makefile.in.patch: Remove. * gnu/local.mk (dist_patch_DATA): Remove it.
* gnu: perl: Fix CVE-2017-6512 in File::Path.Leo Famulari2017-06-06
| | | | | | | * gnu/packages/perl.scm (perl)[replacement]: New field. (perl/fixed): New variable. * gnu/packages/patches/perl-file-path-CVE-2017-6512.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it.
* gnu: xf86-input-wacom: Update to 0.34.2.Marius Bakke2017-06-05
| | | | | | | * gnu/packages/xdisorg.scm (xf86-input-wacom): Update to 0.34.2. [source]: Remove obsolete patch. * gnu/packages/patches/xf86-input-wacom-xorg-abi-25.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
* Merge branch 'staging'Marius Bakke2017-06-05
|\
| * gnu: Add libgdata.Kei Kebreau2017-05-30
| | | | | | | | | | | | | | * gnu/packages/gnome.scm (libgdata): New variable. * gnu/packages/patches/libgdata-fix-tests.patch, gnu/packages/patches/libgdata-glib-duplicate-tests.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them.
| * Merge branch 'master' into stagingMarius Bakke2017-05-28
| |\
| * \ Merge branch 'master' into stagingMarius Bakke2017-05-27
| |\ \