gnu: taglib: Update to 1.12-beta-1 [security fixes].

This switches to a yet unreleased version of taglib, to make sure long
standings issues and CVEs are covered until a proper release is made
upstream.

Among these, we have:

- CVE-2017-12678
- CVE-2018-11439
- https://github.com/taglib/taglib/issues/864

* gnu/packges/mp3.scm (taglib): Update to 1.12-beta-1.
[source]: Switch to using git-fetch.
This commit is contained in:
Pierre Langlois 2020-08-18 18:59:00 +01:00
parent 235093fec0
commit 89e1e44813
No known key found for this signature in database
GPG key ID: A8FC9E447F4F7D54

View file

@ -4,7 +4,7 @@
;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
;;; Copyright © 2016 Efraim Flashner <efraim@flashner.co.il>
;;; Copyright © 2017 Thomas Danckaert <post@thomasdanckaert.be>
;;; Copyright © 2017, 2019 Pierre Langlois <pierre.langlois@gmx.com>
;;; Copyright © 2017, 2019, 2020 Pierre Langlois <pierre.langlois@gmx.com>
;;; Copyright © 2018, 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
;;; Copyright © 2019 Ricardo Wurmus <rekado@elephly.net>
;;; Copyright © 2020 Michael Rohleder <mike@rohleder.de>
@ -50,6 +50,7 @@ (define-module (gnu packages mp3)
#:use-module (gnu packages video) ;ffmpeg
#:use-module (guix packages)
#:use-module (guix download)
#:use-module (guix git-download)
#:use-module (guix utils)
#:use-module (guix build-system gnu)
#:use-module (guix build-system python)
@ -160,14 +161,16 @@ (define-public id3lib
(define-public taglib
(package
(name "taglib")
(version "1.11.1")
(version "1.12-beta-1")
(source (origin
(method url-fetch)
(uri (string-append "http://taglib.github.io/releases/taglib-"
version ".tar.gz"))
(method git-fetch)
(uri (git-reference
(url "https://github.com/taglib/taglib")
(commit (string-append "v" version))))
(file-name (git-file-name name version))
(sha256
(base32
"0ssjcdjv4qf9liph5ry1kngam1y7zp8fzr9xv4wzzrma22kabldn"))))
"1mp6w2ikniw8w6d5wr0h20j0ijg8jw7s9dli5a8k9znpznvxpym4"))))
(build-system cmake-build-system)
(arguments
'(#:tests? #f ; Tests are not ran with BUILD_SHARED_LIBS on.