aboutsummaryrefslogtreecommitdiff
path: root/gnu/packages/patches/ghc-4.patch
diff options
context:
space:
mode:
authorTobias Geerinckx-Rice <me@tobias.gr>2022-05-01 02:00:01 +0200
committerTobias Geerinckx-Rice <me@tobias.gr>2022-05-01 02:00:20 +0200
commitf36a0908f2c2822cbc401f37f254d105df8ce9b1 (patch)
tree57e24410b43e1b6d786b7395498944adcedfca97 /gnu/packages/patches/ghc-4.patch
parent2e99cb15e6483c6c0a2335173ad84e0d540f3fad (diff)
downloadguix-f36a0908f2c2822cbc401f37f254d105df8ce9b1.tar.gz
guix-f36a0908f2c2822cbc401f37f254d105df8ce9b1.zip
gnu: clzip: Update to 1.13.
* gnu/packages/compression.scm (clzip): Update to 1.13.
Diffstat (limited to 'gnu/packages/patches/ghc-4.patch')
0 files changed, 0 insertions, 0 deletions
1ad680de65a1498105c2b'>services: Prevent following symlinks during activation....This addresses a potential security issue, where a compromised service could trick the activation code in changing the permissions, owner and group of arbitrary files. However, this patch is currently only a partial fix, due to a TOCTTOU (time-of-check to time-of-use) race, which can be fixed once guile has bindings to openat and friends. Fixes: <https://lists.gnu.org/archive/html/guix-devel/2021-01/msg00388.html> * gnu/build/activation.scm: new procedure 'mkdir-p/perms'. * gnu/services/authentication.scm (%nslcd-activation, nslcd-service-type): use new procedure. * gnu/services/cups.scm (%cups-activation): likewise. * gnu/services/dbus.scm (dbus-activation): likewise. * gnu/services/dns.scm (knot-activation): likewise. Signed-off-by: Ludovic Courtès <ludo@gnu.org> Maxime Devos