~ruther/guix-local

e83ef684fc1b490cd54612339a909203d5b94fa4 — Leo Famulari 9 years ago e8c83d0 
gnu: libevent-2.0: Include CVE IDs in patches.

* gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch,
gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch,
gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch:
Rename to ...
* gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch,
gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch: ... new files.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/libevent.scm (libevent-2.0)[sources]: Likewise.
patch browse .tar.gz 
5 files changed, 12 insertions(+), 15 deletions(-)

M gnu/local.mk
M gnu/packages/libevent.scm
R gnu/packages/patches/{libevent-2.0-evdns-fix-remote-stack-overread => libevent-2.0-CVE-2016-10195}.patch
R gnu/packages/patches/{libevent-2.0-evutil-fix-buffer-overflow => libevent-2.0-CVE-2016-10196}.patch
R gnu/packages/patches/{libevent-2.0-evdns-fix-searching-empty-hostnames => libevent-2.0-CVE-2016-10197}.patch

M gnu/local.mk => gnu/local.mk +3 -3
@@ 668,9 668,9 @@ dist_patch_DATA =						\
  %D%/packages/patches/libdrm-symbol-check.patch		\
  %D%/packages/patches/libepoxy-gl-null-checks.patch		\
  %D%/packages/patches/libevent-dns-tests.patch			\
  %D%/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch	\
  %D%/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch	\
  %D%/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch	\
  %D%/packages/patches/libevent-2.0-CVE-2016-10195.patch	\
  %D%/packages/patches/libevent-2.0-CVE-2016-10196.patch	\
  %D%/packages/patches/libevent-2.0-CVE-2016-10197.patch	\
  %D%/packages/patches/libevent-2.1-dns-tests.patch		\
  %D%/packages/patches/libevent-2.1-skip-failing-test.patch	\
  %D%/packages/patches/libextractor-ffmpeg-3.patch		\


M gnu/packages/libevent.scm => gnu/packages/libevent.scm +3 -3
@@ 80,9 80,9 @@ loop.")
            "18qz9qfwrkakmazdlwxvjmw8p76g70n3faikwvdwznns1agw9hki"))
          (patches (search-patches
                    "libevent-dns-tests.patch"
                    "libevent-2.0-evdns-fix-remote-stack-overread.patch"
                    "libevent-2.0-evutil-fix-buffer-overflow.patch"
                    "libevent-2.0-evdns-fix-searching-empty-hostnames.patch"))))))
                    "libevent-2.0-CVE-2016-10195.patch"
                    "libevent-2.0-CVE-2016-10196.patch"
                    "libevent-2.0-CVE-2016-10197.patch"))))))

(define-public libev
  (package


R gnu/packages/patches/libevent-2.0-evdns-fix-remote-stack-overread.patch => gnu/packages/patches/libevent-2.0-CVE-2016-10195.patch +2 -3
@@ 1,7 1,6 @@
Fix buffer overread in libevents DNS code.

Upstream bug report:
Fix CVE-2016-10195 (buffer overread in libevent's DNS code):

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10195
https://github.com/libevent/libevent/issues/317

Patch copied from upstream source repository:


R gnu/packages/patches/libevent-2.0-evutil-fix-buffer-overflow.patch => gnu/packages/patches/libevent-2.0-CVE-2016-10196.patch +2 -3
@@ 1,7 1,6 @@
Fix buffer overflow in evutil.

Upstream bug report:
Fix CVE-2016-10196 (buffer overflow in evutil):

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10196
https://github.com/libevent/libevent/issues/318

Patch copied from upstream source repository:


R gnu/packages/patches/libevent-2.0-evdns-fix-searching-empty-hostnames.patch => gnu/packages/patches/libevent-2.0-CVE-2016-10197.patch +2 -3
@@ 1,7 1,6 @@
Fix OOB read on empty hostnames in evdns.

Upstream bug report:
Fix CVE-2016-10197 (out of bounds read on empty hostnames in evdns):

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10197
https://github.com/libevent/libevent/issues/332

Patch copied from upstream source repository: