gnu: pcre: Fix CVE-2016-3191.

* gnu/packages/pcre.scm (pcre)[replacement]: New field.
(pcre-fixed): New variable.
* gnu/packages/patches/pcre-CVE-2016-3191.patch: New file.
* gnu-system.am (dist_patch_DATA): Add it.
This commit is contained in:
Ludovic Courtès 2016-04-06 23:27:10 +02:00
parent a70a50048b
commit a7681d29dc
3 changed files with 161 additions and 0 deletions

View file

@ -22,6 +22,7 @@
#:use-module ((guix licenses) #:prefix license:)
#:use-module (gnu packages compression)
#:use-module (gnu packages readline)
#:use-module (gnu packages)
#:use-module (guix packages)
#:use-module (guix download)
#:use-module (guix build-system gnu))
@ -30,6 +31,7 @@
(package
(name "pcre")
(version "8.38")
(replacement pcre-fixed)
(source (origin
(method url-fetch)
(uri (list
@ -65,6 +67,13 @@ POSIX regular expression API.")
(license license:bsd-3)
(home-page "http://www.pcre.org/")))
(define pcre-fixed ;for CVE-2016-3191
(package
(inherit pcre)
(source (origin
(inherit (package-source pcre))
(patches (list (search-patch "pcre-CVE-2016-3191.patch")))))))
(define-public pcre2
(package
(name "pcre2")