rekahsoft
/
guix
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

gnu: libx11: Replace with 1.6.10 [fixes CVE-2020-14344]. 

* gnu/packages/xorg.scm (libx11/fixed): New variable.
(libx11)[replacement]: New field.
This commit is contained in:
Mark H Weaver 2020-08-01 03:04:38 -04:00
parent 256d2b2e84
commit d7d85c6412
No known key found for this signature in database
GPG Key ID: 7CEF29847562C516
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
gnu/packages/xorg.scm
View File

@ -1,6 +1,6 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2013, 2014 Andreas Enge <andreas@enge.fr>
;;; Copyright © 2014, 2015, 2017, 2018 Mark H Weaver <mhw@netris.org>
;;; Copyright © 2014, 2015, 2017, 2018, 2020 Mark H Weaver <mhw@netris.org>
;;; Copyright © 2014, 2015 Eric Bavier <bavier@member.fsf.org>
;;; Copyright © 2015, 2016, 2017, 2018, 2019 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2015 Eric Dvorsak <eric@dvorsak.fr>
@ -5492,6 +5492,7 @@ draggable titlebars and borders.")
(package
(name "libx11")
(version "1.6.9")
(replacement libx11/fixed)
(source
(origin
(method url-fetch)
@ -5529,6 +5530,19 @@ draggable titlebars and borders.")
(description "Xorg Core X11 protocol client library.")
(license license:x11)))
(define libx11/fixed ; Fixes CVE-2020-14344
(package
(inherit libx11)
(version "1.6.A")
(source
(origin
(method url-fetch)
(uri (string-append
"mirror://xorg/individual/lib/libX11-1.6.10.tar.bz2"))
(sha256
(base32
"09k2pqmqbn2m1bpgl7jfxyqxaaxsnzbnp2bp8ycmqldqi5ln4j5g"))))))
;; packages of height 5 in the propagated-inputs tree
(define-public libxcursor