From 0d0b15f277dead601d18bc5cbb9b55514dc2b216 Mon Sep 17 00:00:00 2001 From: Baptiste Fontaine Date: Wed, 4 Feb 2015 13:48:49 +0100 Subject: [PATCH] pigz 2.3.3 Closes Homebrew/homebrew#36527. Signed-off-by: Mike McQuaid --- Formula/pigz.rb | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/Formula/pigz.rb b/Formula/pigz.rb index a03bd47ea2..bd0fc351ab 100644 --- a/Formula/pigz.rb +++ b/Formula/pigz.rb @@ -1,8 +1,7 @@ class Pigz < Formula - homepage 'http://www.zlib.net/pigz/' - url 'http://www.zlib.net/pigz/pigz-2.3.1.tar.gz' - sha1 '2d5c9a70a6afcf1d8986890026d70c96b9346c07' - revision 1 + homepage "http://www.zlib.net/pigz/" + url "http://www.zlib.net/pigz/pigz-2.3.3.tar.gz" + sha1 "11252d38fe2a7b8d7a712dff22bbb7630287d00b" bottle do cellar :any @@ -11,14 +10,6 @@ class Pigz < Formula sha1 "4348380310afb99b698813e76a4ba01e4d024a1a" => :mountain_lion end - # avoid directory traversal vulnerability CVE-2015-1191 - # http://www.openwall.com/lists/oss-security/2015/01/12/4 - # https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f - patch do - url "https://sources.debian.net/data/main/p/pigz/2.3.1-2/debian/patches/0002-When-decompressing-with-N-or-NT-strip-any-path-from-.patch" - sha1 "b5f058c00ba3834f16d7842fa4fef73cbbf41aaf" - end - def install system "make", "CC=#{ENV.cc}", "CFLAGS=#{ENV.cflags}" bin.install "pigz", "unpigz"