mirror of
https://git.savannah.gnu.org/git/guix.git
synced 2026-04-14 09:00:39 +02:00
* gnu/packages/backup.scm (libarchive): Add replacement with libarchive/fixed. (libarchive/fixed): New variable. Fixes: Out of bounds access in ZIP files [CVE-2024-37407]. Fixes: Out of bounds access in RAR files [CVE-2024-48957, CVE-2024-48958]. Fixes: Race condition in multi-threaded systems [CVE-2023-30571]. Fixes: NULL pointer dereference [CVE-2022-36227]. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>