dpkg 1.18.24
Closes #14031. Signed-off-by: ilovezfs <ilovezfs@icloud.com>
This commit is contained in:
parent
61ba4299f9
commit
d923a8d64a
1 changed files with 9 additions and 3 deletions
|
@ -4,9 +4,9 @@ class Dpkg < Formula
|
|||
# Please always keep the Homebrew mirror as the primary URL as the
|
||||
# dpkg site removes tarballs regularly which means we get issues
|
||||
# unnecessarily and older versions of the formula are broken.
|
||||
url "https://dl.bintray.com/homebrew/mirror/dpkg-1.18.23.tar.xz"
|
||||
mirror "https://mirrors.ocf.berkeley.edu/debian/pool/main/d/dpkg/dpkg_1.18.23.tar.xz"
|
||||
sha256 "cc08802a0cea2ccd0c10716bc71531ff9b9234dd454b83a59f71117a37f36923"
|
||||
url "https://dl.bintray.com/homebrew/mirror/dpkg-1.18.24.tar.xz"
|
||||
mirror "https://mirrors.ocf.berkeley.edu/debian/pool/main/d/dpkg/dpkg_1.18.24.tar.xz"
|
||||
sha256 "d853081d3e06bfd46a227056e591f094e42e78fa8a5793b0093bad30b710d7b4"
|
||||
|
||||
bottle do
|
||||
sha256 "da977afc391afc86460a5deac82d9b2da95d3e7f2697a6cb1e8657bbbf5a7462" => :sierra
|
||||
|
@ -16,6 +16,7 @@ class Dpkg < Formula
|
|||
|
||||
depends_on "pkg-config" => :build
|
||||
depends_on "gnu-tar"
|
||||
depends_on "gpatch"
|
||||
depends_on "xz" # For LZMA
|
||||
|
||||
def install
|
||||
|
@ -23,6 +24,11 @@ class Dpkg < Formula
|
|||
# use the system "tar", which will fail because it lacks certain switches.
|
||||
ENV["TAR"] = Formula["gnu-tar"].opt_bin/"gtar"
|
||||
|
||||
# Since 1.18.24 dpkg mandates the use of GNU patch to prevent occurrences
|
||||
# of the CVE-2017-8283 vulnerability.
|
||||
# http://www.openwall.com/lists/oss-security/2017/04/20/2
|
||||
ENV["PATCH"] = Formula["gpatch"].opt_bin/"patch"
|
||||
|
||||
# Theoretically, we could reinsert a patch here submitted upstream previously
|
||||
# but the check for PERL_LIB remains in place and incompatible with Homebrew.
|
||||
# Using an env and scripting is a solution less likely to break over time.
|
||||
|
|
Loading…
Reference in a new issue