amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: aspell: Fix CVE-2019-25051 with a graft.

Browse source 
This partially reverts commit 468c95e941 in
order to prevent rebuilding 2k+ packages via 'inkscape'.

* gnu/packages/aspell.scm (aspell)[replacement]: New field.
[source](patches): Remove "aspell-CVE-2019-25051.patch".
(aspell/replacement): New private variable.
This commit is contained in:
Marius Bakke 2022-08-10 09:50:02 +02:00
parent 2111a4eee7
commit 924a78b114
No known key found for this signature in database
GPG key ID: A2A06DF2A33A54FA
1 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
gnu/packages/aspell.scm
View file

@ -47,6 +47,7 @@
(package (package
(name "aspell") (name "aspell")
(version "0.60.8") (version "0.60.8")
(replacement aspell/replacement)
(source (source
(origin (origin
(method url-fetch) (method url-fetch)
@ -55,8 +56,7 @@
(sha256 (sha256
(base32 (base32
"1wi60ankalmh8ds7nplz434jd7j94gdvbahdwsr539rlad8pxdzr")) "1wi60ankalmh8ds7nplz434jd7j94gdvbahdwsr539rlad8pxdzr"))
(patches (search-patches "aspell-default-dict-dir.patch" (patches (search-patches "aspell-default-dict-dir.patch"))))
"aspell-CVE-2019-25051.patch"))))
(build-system gnu-build-system) (build-system gnu-build-system)
(arguments (arguments
`(#:phases `(#:phases
@ -93,6 +93,16 @@ documents written in the UTF-8 encoding and its ability to use multiple
dictionaries, including personal ones.") dictionaries, including personal ones.")
(license lgpl2.1+))) (license lgpl2.1+)))
;; Replacement package with security fixes.
(define aspell/replacement
(package
(inherit aspell)
(source
(origin
(inherit (package-source aspell))
(patches (append (origin-patches (package-source aspell))
(search-patches "aspell-CVE-2019-25051.patch")))))))
;;; ;;;
;;; Dictionaries. ;;; Dictionaries.
;;; ;;;