01/01: gnu: libarchive: Replace with 3.3.1 [security fixes].

[Kei Kebreau]

kkebreau pushed a commit to branch master
in repository guix.

commit 9034dc8f2a81d5f645548edfaa43f7698062105b
Author: Kei Kebreau <address@hidden>
Date:   Mon May 8 14:58:07 2017 -0400

    gnu: libarchive: Replace with 3.3.1 [security fixes].
    
    Fixes CVE-2016-{10209,10350} and CVE-2017-5601.
    
    * gnu/packages/backup.scm (libarchive)[replacement]: New field.
    (libarchive-3.3.1): New variable.
---
 gnu/packages/backup.scm | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/gnu/packages/backup.scm b/gnu/packages/backup.scm
index f9c0a22..d5cb578 100644
--- a/gnu/packages/backup.scm
+++ b/gnu/packages/backup.scm
@@ -5,6 +5,7 @@
 ;;; Copyright © 2017 Tobias Geerinckx-Rice <address@hidden>
 ;;; Copyright © 2017 Thomas Danckaert <address@hidden>
 ;;; Copyright © 2017 Arun Isaac <address@hidden>
+;;; Copyright © 2017 Kei Kebreau <address@hidden>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -186,6 +187,7 @@ backups (called chunks) to allow easy burning to CD/DVD.")
 (define-public libarchive
   (package
     (name "libarchive")
+    (replacement libarchive-3.3.1)
     (version "3.2.2")
     (source
      (origin
@@ -241,6 +243,20 @@ archive.  In particular, note that there is currently no 
built-in support for
 random access nor for in-place modification.")
     (license license:bsd-2)))
 
+(define libarchive-3.3.1
+  (package
+    (inherit libarchive)
+    (name "libarchive")
+    (version "3.3.1")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "http://libarchive.org/downloads/libarchive-";
+                           version ".tar.gz"))
+       (sha256
+        (base32
+         "1rr40hxlm9vy5z2zb5w7pyfkgd1a4s061qapm83s19accb8mpji9"))))))
+
 (define-public rdup
   (package
     (name "rdup")