gnu: upx: Fix CVE-2021-20285.

* gnu/packages/patches/upx-CVE-2021-20285.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (upx): Apply patch.
This commit is contained in:
Léo Le Bouter 2021-03-26 22:51:14 +01:00
parent 147b86ad30
commit 53dd99bc0b
No known key found for this signature in database
GPG key ID: 45A8B1E86BCD10A6
3 changed files with 79 additions and 1 deletions

View file

@ -2100,7 +2100,8 @@ decompression is a little bit slower.")
version "/upx-" version "-src.tar.xz"))
(sha256
(base32
"051pk5jk8fcfg5mpgzj43z5p4cn7jy5jbyshyn78dwjqr7slsxs7"))))
"051pk5jk8fcfg5mpgzj43z5p4cn7jy5jbyshyn78dwjqr7slsxs7"))
(patches (search-patches "upx-CVE-2021-20285.patch"))))
(build-system gnu-build-system)
(native-inputs
`(("perl" ,perl)))