From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: bug#30006: bzip2 does not provide libbz2.so Date: Fri, 23 Mar 2018 13:02:07 +0100 Message-ID: <877eq3knk0.fsf@fastmail.com> References: <87incft8tf.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53924) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ezLPX-0007zN-NR for bug-guix@gnu.org; Fri, 23 Mar 2018 08:03:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ezLPS-0002AM-Qy for bug-guix@gnu.org; Fri, 23 Mar 2018 08:03:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:40863) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ezLPS-0002AH-MO for bug-guix@gnu.org; Fri, 23 Mar 2018 08:03:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ezLPS-0008E3-DM for bug-guix@gnu.org; Fri, 23 Mar 2018 08:03:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87incft8tf.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 30006@debbugs.gnu.org --==-=-= Content-Type: multipart/mixed; boundary="=-=-=" --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s writes: > Our current bzip2 package does not provide libbz2.so: > > --8<---------------cut here---------------start------------->8--- > $ ls $(guix build bzip2)/lib > libbz2.a libbz2.so.1.0 libbz2.so.1.0.6 > --8<---------------cut here---------------end--------------->8--- > > Consequently, software that uses libbz2 always ends up > statically-linking it. Thus, security issues in libbz2 cannot be > grafted. WDYT of this patch? --=-=-= Content-Type: text/x-patch Content-Disposition: inline; filename=0001-gnu-bzip2-Provide-libbz2.so.patch Content-Transfer-Encoding: quoted-printable From=201eec25f2aad3d20289ced4fbca9a614f6d614fa6 Mon Sep 17 00:00:00 2001 From: Marius Bakke Date: Fri, 23 Mar 2018 12:56:45 +0100 Subject: [PATCH] gnu: bzip2: Provide libbz2.so. Fixes . * gnu/packages/compression.scm (bzip2)[arguments]: In INSTALL-SHARED-LIBS-PHASE, add a symlink. =2D-- gnu/packages/compression.scm | 3 +++ 1 file changed, 3 insertions(+) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index b158feac4..fd111e579 100644 =2D-- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -272,6 +272,9 @@ file; as a result, it is often used in conjunction with= \"tar\", resulting in (lambda* (#:key outputs #:allow-other-keys) (let* ((out (assoc-ref outputs "out")) (libdir (string-append out "/lib"))) + ;; The Make target above does not create "libbz2.so", only + ;; the versioned libs, so we have to create it ourselves. + (symlink "libbz2.so.1.0" "libbz2.so") (for-each (lambda (file) (let ((base (basename file))) (format #t "installing `~a' to `~a'~%" =2D-=20 2.16.2 --=-=-=-- --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlq07L8ACgkQoqBt8qM6 VPrVawf/fEiCwKqnxaElXxUiN6WvEIfWt3HZbyk2T/RiTaxqKrfx1eXQNkOHfYpx jn4hsPZv9sMfDNNZxDIwtwQi1p9Ykqc3yZ1IY6kRXdxGDNkjPBU1Oj6jAboyj2N0 jm2EOFIoWELGGauTsrdcUwlNR7wbkxzgef5obcNEgcgAsHEkgGUl+avWJsZWm6rT LMUIRIz+074RkrzvbOXAxXHLpae3tfIeHP1NWk2Z8etICS0+DRWv8AYBtWqQO0Zb Sp+ifeVuIYLfjmFJcYhmHw1a/Olg/2BIVOc69biWMQOdpKFiaJUUOxBHmQ20la1x 12OYByQXGLdyBgkbSrn4iBRTmf3Jbw== =f7b8 -----END PGP SIGNATURE----- --==-=-=--