Commit graph

517 commits

Author SHA1 Message Date
Efraim Flashner
9098745b18
gnu: zziplib/fixed: Add missing library symlinks.
Fixes <https://bugs.gnu.org/47212>, <https://bugs.gnu.org/47448>,
<https://bugs.gnu.org/47492>.

* gnu/packages/compression.scm (zziplib/fixed)[arguments]: Add new phase
to create missing library symlinks.
2021-03-30 11:04:33 +03:00
Léo Le Bouter
9feef62b73
gnu: zstd: Downgrade to 1.4.4 and make security graft saner.
* gnu/packages/patches/zstd-CVE-2021-24031_CVE-2021-24032.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (zstd-1.4.9): Remove.
(zstd/fixed): New variable. Apply patch.
(zstd)[replacement]: Graft with zstd/fixed.
2021-03-30 02:21:25 +02:00
Léo Le Bouter
53dd99bc0b
gnu: upx: Fix CVE-2021-20285.
* gnu/packages/patches/upx-CVE-2021-20285.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (upx): Apply patch.
2021-03-26 22:52:33 +01:00
Léo Le Bouter
b26f958620
gnu: pzstd: Update to 1.4.9 [fixes CVE-2021-24032].
* gnu/packages/compression.scm (pzstd): Use 'package/inherit' over zstd so any
graft applied to zstd cascades onto pzstd which is built from the same
source.
2021-03-17 10:58:29 +01:00
Léo Le Bouter
cddf0b8955
gnu: unzip/fixed: Make private.
* gnu/packages/compression.scm (unzip/fixed): Use define instead of
define-public.
2021-03-15 12:22:17 +01:00
Lars-Dominik Braun
ee4ba54271
gnu: gzstream: Add PIC flag.
* gnu/packages/compression.scm (gzstream) [arguments]: Add phase 'use-pic.
2021-03-15 10:53:04 +01:00
Léo Le Bouter
703843922a
gun: unzip/fixed: Fix tests on 32-bit systems.
* gnu/packages/patches/unzip-32bit-zipbomb-fix.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (unzip/fixed): Apply patch.
2021-03-14 09:09:45 +01:00
Efraim Flashner
699a56e3a3
gnu: unzip: Fix patch name.
This is what happens when you push without testing your changes :/

* gnu/packages/compression.scm (unzip)[source]: Adjust patch name.
2021-03-14 09:27:43 +02:00
Léo Le Bouter
31d289a475
gnu: unzip: Add patches from Fedora [security fixes].
Non-exhaustively fixes CVE-2016-9844, CVE-2018-1000035, CVE-2018-18384, and
CVE-2019-13232.

* gnu/packages/patches/unzip-COVSCAN-fix-unterminated-string.patch,
gnu/packages/patches/unzip-CVE-2016-9844.patch,
gnu/packages/patches/unzip-CVE-2018-1000035.patch,
gnu/packages/patches/unzip-CVE-2018-18384.patch,
gnu/packages/patches/unzip-case-insensitive.patch,
gnu/packages/patches/unzip-alt-iconv-utf8-print.patch,
gnu/packages/patches/unzip-alt-iconv-utf8.patch,
gnu/packages/patches/unzip-close.patch,
gnu/packages/patches/unzip-exec-shield.patch,
gnu/packages/patches/unzip-fix-recmatch.patch,
gnu/packages/patches/unzip-manpage-fix.patch,
gnu/packages/patches/unzip-overflow.patch,
gnu/packages/patches/unzip-symlink.patch,
gnu/packages/patches/unzip-timestamp.patch,
gnu/packages/patches/unzip-valgrind.patch,
gnu/packages/patches/unzip-x-option.patch,
gnu/packages/patches/unzip-zipbomb-manpage.patch,
gnu/packages/patches/unzip-zipbomb-part1.patch,
gnu/packages/patches/unzip-zipbomb-part2.patch,
gnu/packages/patches/unzip-zipbomb-part3.patch: New patches.
* gnu/local.mk (dist_patch_DATA): Register them.
* gnu/packages/compression.scm (unzip/fixed): New variable. Apply patches.
(unzip)[replacement]: Graft.
2021-03-14 06:11:20 +01:00
Léo Le Bouter
373c7b5791
gnu: Remove bsdiff.
As discussed in
<https://lists.gnu.org/archive/html/guix-devel/2021-03/msg00154.html>, remove
because of unpatched CVE-2020-14315 with no non-FreeBSD patch in sight.

* gnu/packages/compression.scm (bsdiff): Remove.
2021-03-13 02:31:53 +01:00
Léo Le Bouter
2bcfb944bd
gnu: zstd-1.4.9: Fix i686-linux and arm/aarch64-linux builds.
It's only a graft added for security so disabling tests on there seems
acceptable.

See: <https://lists.gnu.org/archive/html/guix-devel/2021-03/msg00130.html>.

* gnu/packages/compression.scm (zstd-1.4.9)[arguments]: Substitute keyword
arguments of 'zstd' to disable tests.
2021-03-11 02:58:28 +01:00
Léo Le Bouter
f7fdafeff5
gnu: zziplib: Update to 0.13.72 [security fixes].
Non-exhaustively, fixes CVE-2018-16548 and CVE-2018-17828.

* gnu/packages/compression.scm (zziplib/fixed): New variable.
(zziplib)[replacement]: Graft.
2021-03-10 10:59:12 +01:00
Léo Le Bouter
b66fc0a64b
gnu: bsdiff: Fix CVE-2014-9862.
* gnu/packages/patches/bsdiff-CVE-2014-9862.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/compression.scm (bsdiff): Apply it.
2021-03-10 09:54:27 +01:00
Tobias Geerinckx-Rice
2e6d40b373
gnu: lrzip: Update to 0.641.
* gnu/packages/compression.scm (lrzip): Update to 0.641.
2021-03-09 15:24:50 +01:00
Léo Le Bouter
6f873731a0
gnu: zstd: Update to 1.4.9 [security fixes].
Fixes CVE-2021-24031 and CVE-2021-24032.

* gnu/packages/compression.scm (zstd-1.4.9): New variable.
* gnu/packages/compression.scm (zstd): Update to 1.4.9.
[replacement]: Graft with 'zstd-1.4.9'.
2021-03-06 02:42:34 +01:00
Tobias Geerinckx-Rice
69f75ce198
gnu: pigz: Update to 2.6.
* gnu/packages/compression.scm (pigz): Update to 2.6.
2021-03-04 17:07:49 +01:00
Tobias Geerinckx-Rice
afeb2e27bb
gnu: clzip: Update to 1.12.
* gnu/packages/compression.scm (clzip): Update to 1.12.
2021-03-04 17:07:48 +01:00
Vincent Legoll
51697aab42
gnu: lrzip: Update to 0.640.
* gnu/packages/compression.scm (lrzip): Update to 0.640.
[source]: Remove obsolete patch 'lrzip-CVE-2017-8842.patch'.
[inputs]: Add lz4.
* gnu/packages/patches/lrzip-CVE-2017-8842.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

Signed-off-by: Leo Famulari <leo@famulari.name>
2021-02-20 13:40:54 -05:00
Tobias Geerinckx-Rice
43e09b4340
gnu: xarchiver: Update to 0.5.4.17.
* gnu/packages/compression.scm (xarchiver): Update to 0.5.4.17.
2021-02-15 18:09:39 +01:00
Tobias Geerinckx-Rice
26688b8dc4
gnu: libjcat: Update to 0.1.6.
* gnu/packages/compression.scm (libjcat): Update to 0.1.6.
2021-02-15 18:09:39 +01:00
Tobias Geerinckx-Rice
4bf11e250d
gnu: lunzip: Update to 1.12.
* gnu/packages/compression.scm (lunzip): Update to 1.12.
2021-02-15 18:09:39 +01:00
Léo Le Bouter
78bbf6c443
gnu: lz4: Disable parallel testing.
* gnu/packages/compression.scm (lz4)[arguments]: Set "#:parallel-tests?"
keyword argument to "#f".

Signed-off-by: 宋文武 <iyzsong@member.fsf.org>
2021-02-11 17:25:08 +08:00
Antoine Côté
e7195e83c8
gnu: tarlz: Update to 0.19.
* gnu/packages/compression.scm (tarlz): Update to 0.19.

Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>
2021-02-04 14:33:11 +01:00
Léo Le Bouter
9d5ed93162
gnu: Add libjcat.
* gnu/packages/compression.scm (libjcat): New variable.

Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2021-01-27 21:11:47 +01:00
Vincent Legoll
57b0949a49
gnu: lzlib: Update to 1.12.
* gnu/packages/compression.scm (lzlib): Update to 1.12.

Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2021-01-20 10:51:54 +02:00
Tobias Geerinckx-Rice
8818bb3a3e
gnu: zutils: Update to 1.10.
* gnu/packages/compression.scm (zutils): Update to 1.10.
2021-01-10 23:38:48 +01:00
Tobias Geerinckx-Rice
341b2d3d36
gnu: plzip: Update to 1.9.
* gnu/packages/compression.scm (plzip): Update to 1.9.
2021-01-09 23:14:26 +01:00
Tobias Geerinckx-Rice
0eacdd462e
gnu: lziprecover: Update to 1.22.
* gnu/packages/compression.scm (lziprecover): Update to 1.22.
2021-01-06 00:58:42 +01:00
Tobias Geerinckx-Rice
faa736b87d
gnu: xarchiver: Update to 0.5.4.16.
* gnu/packages/compression.scm (xarchiver): Update to 0.5.4.16.
2020-12-18 22:39:22 +01:00
Efraim Flashner
6b7c483328
gnu: google-brotli: Update to 1.0.9 (Fixes CVE-2020-8927).
* gnu/packages/compression.scm (google-brotli): Update to 1.0.9.
[source]: Add snippet to remove unrecognized '-R' flag from pkg-config
files.
2020-12-03 08:59:40 +02:00
Tobias Geerinckx-Rice
65c110e27a
gnu: Add ziptime.
* gnu/packages/compression.scm (ziptime): New public variable.
2020-11-30 21:17:26 +01:00
Marius Bakke
a485a98ca8
Merge branch 'master' into staging 2020-11-22 23:36:09 +01:00
Efraim Flashner
8ed4c468ab
gnu: Don't append '.git' to GitHub uris.
* gnu/packages/admin.scm (nmrpflash)[source]: Remove '.git' from URI.
* gnu/packages/aidc.scm (zxing-cpp),
* gnu/packages/assembly.scm (mbuild),
* gnu/packages/audio.scm (opensles, wildmidi, tinyalsa),
* gnu/packages/browser-extensions.scm (ublock-origin-chromium),
* gnu/packages/check.scm (mutest),
* gnu/packages/compression.scm (unshield),
* gnu/packages/coq.scm (subset),
* gnu/packages/dictionaries.scm (translate-shell),
* gnu/packages/disk.scm (memkind),
* gnu/packages/documentation.scm (latex2html),
* gnu/packages/emacs-xyz.scm (emacs-chronometrist,
  emacs-flycheck-ledger, emacs-counsel-notmuch, emacs-spaceline,
  emacs-org-generate),
* gnu/packages/embedded.scm (ebusd, ebusd-configuration),
* gnu/packages/enchant.scm (nuspell),
* gnu/packages/fontutils.scm (woff2),
* gnu/packages/geo.scm (memphis),
* gnu/packages/gimp.scm (mrg),
* gnu/packages/gnome-xyz.scm (gnome-shell-extension-appindicator),
* gnu/packages/gnome.scm (parlatype),
* gnu/packages/golang.scm (go-github-com-tv42-httpunix,
  go-github-com-ayufan-golang-kardianos-service),
* gnu/packages/graphics.scm (eglexternalplatform, egl-wayland, mmm,
  directfb, flux),
* gnu/packages/gstreamer.scm (openni2, ccextractor, libvisual,
  graphene),
* gnu/packages/guile-xyz.scm (guile-srfi-180, guile-torrent),
* gnu/packages/image.scm (openjpeg-data),
* gnu/packages/java.scm (javacc),
* gnu/packages/language.scm (liblouis, liblouisutdml),
* gnu/packages/linux.scm (pamela, ttyebus),
* gnu/packages/lxqt.scm (lxqt-connman-applet),
* gnu/packages/mail.scm (libetpan),
* gnu/packages/man.scm (ronn),
* gnu/packages/music.scm (tascam-gtk, artyfx),
* gnu/packages/networking.scm (srt, lksctp-tools, nng, nanomsg),
* gnu/packages/python-crypto.scm (pure-python-otr),
* gnu/packages/qt.scm (qtspell),
* gnu/packages/raspberry-pi.scm (raspi-gpio, raspi-open-firmware),
* gnu/packages/rdp.scm (freerdp),
* gnu/packages/ruby.scm (ruby-prawn-templates, ruby-treetop, ruby-gimme,
  ruby-standard, ruby-rubocop-ast, ruby-rexml, ruby-range-compressor,
  ruby-regexp-property-values, ruby-regexp-parser, ruby-rubocop,
  ruby-pdf-reader, ruby-pdf-inspector, ruby-prawn),
* gnu/packages/syncthing.scm (syncthing-gtk),
* gnu/packages/video.scm (svt-hevc, mediasdk, libvideogfx, libde265,
  tslib),
* gnu/packages/xml.scm (libxmlb, libxmlplusplus)[source]: Same.
2020-11-19 20:48:26 +02:00
Marius Bakke
35ed83beae
Merge branch 'master' into staging 2020-11-19 00:04:32 +01:00
Tobias Geerinckx-Rice
c4227f7b3d
gnu: lz4: Update to 1.9.3.
* gnu/packages/compression.scm (lz4): Update to 1.9.3.
2020-11-16 19:21:06 +01:00
Efraim Flashner
455daf46ad
gnu: pzstd: Cross compile.
* gnu/packages/compression.scm (pzstd)[arguments]: use cc-for-target,
cxx-for-target in make-flags.
[native-inputs]: Only use googletest when compiling natively.
[inputs]: Add googletest when cross compiling.
2020-11-16 15:10:30 +02:00
Efraim Flashner
9f58c83c3a
gnu: zstd: Cross compile.
* gnu/packages/compression.scm (zstd)[arguments]: When targeting another
system use cc-for-target in make-flags.
2020-11-16 14:47:37 +02:00
Efraim Flashner
40b52444bb
gnu: bsdiff: Cross compile.
* gnu/packages/compression.scm (bsdiff)[arguments]: Use cc-for-target in
make-flags.
2020-11-16 14:40:50 +02:00
Efraim Flashner
c0040f0ed0
gnu: squashfs-tools: Cross compile.
* gnu/packages/compression.scm (squashfs-tools)[arguments]: Use
cc-for-target in make-flags.
2020-11-16 14:39:41 +02:00
Efraim Flashner
dfb4a28575
gnu: lz4: Cross compile.
* gnu/packages/compression.scm (lz4)[arguments]: When targeting another
system use cc-for-target in make-flags.
2020-11-16 14:38:57 +02:00
Marius Bakke
a9a0d34874
Merge branch 'master' into staging 2020-11-11 00:02:32 +01:00
Efraim Flashner
97ac5b7056
gnu: atool: Update source URI.
* gnu/packages/compression.scm (atool)[source]: Update to new source URI.
2020-11-08 23:27:14 +02:00
Tobias Geerinckx-Rice
2e8a9db6ef
gnu: lz4: Add a :static output.
* gnu/packages/compression.scm (lz4)[outputs]: Add "static" to this new
field.
[arguments]: Replace the ‘delete-static-library’ phase with
‘move-static-library’.
2020-11-06 00:16:07 +01:00
Tobias Geerinckx-Rice
2b6ecdf41a
gnu: lz4: Cross-compile.
* gnu/packages/compression.scm (lz4)[arguments]: Use CC-FOR-TARGET.
2020-10-12 15:07:53 +02:00
Ludovic Courtès
6c5197226d
gnu: lzlib: Don't build static library.
* gnu/packages/compression.scm (lzlib)[arguments]: Pass "--disable-static".
2020-09-26 23:07:03 +02:00
Ludovic Courtès
31dcc27276
gnu: lzlib: Support cross-compilation.
Until now, since lzlib's 'configure' ignores '--host', we'd always end
up building it natively.

* gnu/packages/compression.scm (lzlib)[arguments]: Use (cc-for-target)
instead of "gcc".
2020-09-26 23:07:03 +02:00
Guillaume Le Vaillant
ff43f128b7
gnu: Add tarlz.
* gnu/packages/compression.scm (tarlz): New variable.
2020-09-24 14:48:38 +02:00
Tobias Geerinckx-Rice
73996c0250
gnu: innoextract: Update to 1.9.
* gnu/packages/compression.scm (innoextract): Update to 1.9.
[source]: Download from official home page.
[arguments]: Remove obsolete configure flag.
2020-08-11 16:25:05 +02:00
Tobias Geerinckx-Rice
468c8f6434
gnu: pixz: Update to 1.0.7.
* gnu/packages/compression.scm (pixz): Update to 1.0.7.
2020-07-28 21:24:12 +02:00
Tobias Geerinckx-Rice
7e6df0e993
gnu: libzip: Update to 1.7.3.
* gnu/packages/compression.scm (libzip): Update to 1.7.3.
2020-07-19 02:19:29 +02:00