diff options
| author | Pierre Langlois <[email protected]> | 2020-08-18 18:59:00 +0100 |
|---|---|---|
| committer | Pierre Langlois <[email protected]> | 2020-09-04 12:04:43 +0100 |
| commit | 89e1e4481382d18033a9773b90c09345fa33d6cb (patch) | |
| tree | 1325b4e2c639cb9feea3e185464046fd894f03bc /gnu/packages/mp3.scm | |
| parent | 235093fec0daf3563e21036d74c250d4770ffc77 (diff) | |
gnu: taglib: Update to 1.12-beta-1 [security fixes].
This switches to a yet unreleased version of taglib, to make sure long
standings issues and CVEs are covered until a proper release is made
upstream.
Among these, we have:
- CVE-2017-12678
- CVE-2018-11439
- https://github.com/taglib/taglib/issues/864
* gnu/packges/mp3.scm (taglib): Update to 1.12-beta-1.
[source]: Switch to using git-fetch.
Diffstat (limited to 'gnu/packages/mp3.scm')
| -rw-r--r-- | gnu/packages/mp3.scm | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/gnu/packages/mp3.scm b/gnu/packages/mp3.scm index 92e3d5d5f8..7ee009df74 100644 --- a/gnu/packages/mp3.scm +++ b/gnu/packages/mp3.scm @@ -4,7 +4,7 @@ ;;; Copyright © 2015 Mark H Weaver <[email protected]> ;;; Copyright © 2016 Efraim Flashner <[email protected]> ;;; Copyright © 2017 Thomas Danckaert <[email protected]> -;;; Copyright © 2017, 2019 Pierre Langlois <[email protected]> +;;; Copyright © 2017, 2019, 2020 Pierre Langlois <[email protected]> ;;; Copyright © 2018, 2019, 2020 Tobias Geerinckx-Rice <[email protected]> ;;; Copyright © 2019 Ricardo Wurmus <[email protected]> ;;; Copyright © 2020 Michael Rohleder <[email protected]> @@ -50,6 +50,7 @@ #:use-module (gnu packages video) ;ffmpeg #:use-module (guix packages) #:use-module (guix download) + #:use-module (guix git-download) #:use-module (guix utils) #:use-module (guix build-system gnu) #:use-module (guix build-system python) @@ -160,14 +161,16 @@ a highly stable and efficient implementation.") (define-public taglib (package (name "taglib") - (version "1.11.1") + (version "1.12-beta-1") (source (origin - (method url-fetch) - (uri (string-append "http://taglib.github.io/releases/taglib-" - version ".tar.gz")) + (method git-fetch) + (uri (git-reference + (url "https://github.com/taglib/taglib") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) (sha256 (base32 - "0ssjcdjv4qf9liph5ry1kngam1y7zp8fzr9xv4wzzrma22kabldn")))) + "1mp6w2ikniw8w6d5wr0h20j0ijg8jw7s9dli5a8k9znpznvxpym4")))) (build-system cmake-build-system) (arguments '(#:tests? #f ; Tests are not ran with BUILD_SHARED_LIBS on. |