bug#53335: closed ([PATCH] gnu: expat: Add replacement for [security fixes].)

[GNU bug Tracking System]

Your message dated Wed, 19 Jan 2022 19:08:17 +0100
with message-id <87h79zwq1o.fsf@nckx>
and subject line [PATCH] gnu: expat: Add replacement for [security fixes].
has caused the debbugs.gnu.org bug report #53335,
regarding [PATCH] gnu: expat: Add replacement for [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@gnu.org.)


-- 
53335: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=53335
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> [PATCH] gnu: expat: Add replacement for [security fixes].
>
>
>
>
> Date: 
>
> Sun, 16 Jan 2022 01:00:04 +0100
>
>
>
>
> Fixes CVE-2021-45960, CVE-2021-46143, and CVE-2022-22822…22827.
>
> * gnu/packages/xml.scm (expat/fixed): New variable.
> (expat)[replacement]: Use it.
> ---
>  gnu/packages/xml.scm | 18 ++++++++++++++++++
>  1 file changed, 18 insertions(+)
>
> diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm
> index b89115a051..771c577618 100644
> --- a/gnu/packages/xml.scm
> +++ b/gnu/packages/xml.scm
> @@ -119,6 +119,7 @@ (define-public expat
>    (package
>      (name "expat")
>      (version "2.4.1")
> +    (replacement expat/fixed)
>      (source (let ((dot->underscore (lambda (c) (if (char=? #\. c) #\_ c))))
>                (origin
>                  (method url-fetch)
> @@ -154,6 +155,23 @@ (define-public expat
>  things the parser might find in the XML document (like start tags).")
>      (license license:expat)))
>  
> +(define expat/fixed
> +  (package
> +    (inherit expat)
> +    (version "2.4.3")
> +    (source (let ((dot->underscore (lambda (c) (if (char=? #\. c) #\_ c))))
> +              (origin
> +                (method url-fetch)
> +                (uri (list (string-append "mirror://sourceforge/expat/expat/"
> +                                          version "/expat-" version ".tar.xz")
> +                           (string-append
> +                            
> "https://github.com/libexpat/libexpat/releases/download/R_";
> +                            (string-map dot->underscore version)
> +                            "/expat-" version ".tar.xz")))
> +                (sha256
> +                 (base32
> +                  "12kp4h40cpyqqpjqaldag0xq4ig1ljzpkzy9i2marc7blnqz3ydi")))))))
> +
>  (define-public libebml
>    (package
>      (name "libebml")
> -- 
> 2.34.0
>
>
>
>
> --- End Message ---

--- Begin Message --- Subject: [PATCH] gnu: expat: Add replacement for [security fixes]. Date: Wed, 19 Jan 2022 19:08:17 +0100

Pushed as 2045852b096131a714409aa0cc4fe17938f60b15.

Kind regards,

T G-R

signature.asc
Description: PGP signature

--- End Message ---