From efc95e7bc6bfd97425b9f2fdb5eebac6b99aac6b Mon Sep 17 00:00:00 2001
From: Leo Famulari <leo@famulari.name>
Date: Wed, 12 Apr 2017 22:28:09 -0400
Subject: gnu: libsamplerate: Update to 0.1.9 [fixes CVE-2017-7697].

* gnu/packages/pulseaudio.scm (libsamplerate)[replacement]: New field.
(libsamplerate-0.1.9): New variable.
---
 gnu/packages/pulseaudio.scm | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'gnu/packages/pulseaudio.scm')

diff --git a/gnu/packages/pulseaudio.scm b/gnu/packages/pulseaudio.scm
index a12f8d8494..e306bdf3ad 100644
--- a/gnu/packages/pulseaudio.scm
+++ b/gnu/packages/pulseaudio.scm
@@ -3,6 +3,7 @@
 ;;; Copyright © 2014, 2015, 2016 Mark H Weaver <mhw@netris.org>
 ;;; Copyright © 2016 Efraim Flashner <efraim@flashner.co.il>
 ;;; Copyright © 2016 Ricardo Wurmus <rekado@elephly.net>
+;;; Copyright © 2017 Leo Famulari <leo@famulari.name>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -75,6 +76,7 @@ (define-public libsndfile
 (define-public libsamplerate
   (package
     (name "libsamplerate")                     ; aka. Secret Rabbit Code (SRC)
+    (replacement libsamplerate-0.1.9)
     (version "0.1.8")
     (source (origin
              (method url-fetch)
@@ -110,6 +112,19 @@ (define-public libsamplerate
 rates.")
     (license l:gpl2+)))
 
+(define libsamplerate-0.1.9
+  (package
+    (inherit libsamplerate)
+    (version "0.1.9")
+    (source
+      (origin
+        (method url-fetch)
+        (uri (string-append "http://www.mega-nerd.com/SRC/libsamplerate-"
+                            version ".tar.gz"))
+        (sha256
+         (base32
+          "1ha46i0nbibq0pl0pjwcqiyny4hj8lp1bnl4dpxm64zjw9lb2zha"))))))
+
 (define-public pulseaudio
   (package
     (name "pulseaudio")
-- 
cgit v1.2.3


From 2e3744730777dc4e988675be369692d2be6fa1e2 Mon Sep 17 00:00:00 2001
From: Leo Famulari <leo@famulari.name>
Date: Wed, 12 Apr 2017 22:37:23 -0400
Subject: gnu: libsndfile: Update to 1.0.28 [fixes
 CVE-2017-{7585,7586,7741,7742}].

* gnu/packages/pulseaudio.scm (libsndfile)[replacement]: New field.
(libsndfile-1.0.28): New variable.
---
 gnu/packages/pulseaudio.scm | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'gnu/packages/pulseaudio.scm')

diff --git a/gnu/packages/pulseaudio.scm b/gnu/packages/pulseaudio.scm
index e306bdf3ad..71fcc3f827 100644
--- a/gnu/packages/pulseaudio.scm
+++ b/gnu/packages/pulseaudio.scm
@@ -43,6 +43,7 @@ (define-module (gnu packages pulseaudio)
 (define-public libsndfile
   (package
     (name "libsndfile")
+    (replacement libsndfile-1.0.28)
     (version "1.0.27")
     (source (origin
              (method url-fetch)
@@ -73,6 +74,19 @@ (define-public libsndfile
 for reading and writing new sound file formats.")
     (license l:gpl2+)))
 
+(define libsndfile-1.0.28
+  (package
+    (inherit libsndfile)
+    (version "1.0.28")
+    (source
+      (origin
+        (method url-fetch)
+        (uri (string-append "http://www.mega-nerd.com/libsndfile/files/libsndfile-"
+                            version ".tar.gz"))
+        (sha256
+         (base32
+          "1afzm7jx34jhqn32clc5xghyjglccam2728yxlx37yj2y0lkkwqz"))))))
+
 (define-public libsamplerate
   (package
     (name "libsamplerate")                     ; aka. Secret Rabbit Code (SRC)
-- 
cgit v1.2.3