01/01: gnu: mpg123: Update to 1.25.2 [fixes CVE-2017-10683].

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository guix.

commit d5ff67f411a6a91f2cfa589d185fbc025046f1db
Author: Ludovic Courtès <address@hidden>
Date:   Tue Jul 11 11:53:53 2017 +0200

    gnu: mpg123: Update to 1.25.2 [fixes CVE-2017-10683].
    
    * gnu/packages/mp3.scm (mpg123): Update to 1.25.2.
---
 gnu/packages/mp3.scm | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/mp3.scm b/gnu/packages/mp3.scm
index 8a3a580..789e596 100644
--- a/gnu/packages/mp3.scm
+++ b/gnu/packages/mp3.scm
@@ -1,6 +1,6 @@
 ;;; GNU Guix --- Functional package management for GNU
 ;;; Copyright © 2013 Andreas Enge <address@hidden>
-;;; Copyright © 2014, 2015 Ludovic Courtès <address@hidden>
+;;; Copyright © 2014, 2015, 2017 Ludovic Courtès <address@hidden>
 ;;; Copyright © 2015 Mark H Weaver <address@hidden>
 ;;; Copyright © 2016 Efraim Flashner <address@hidden>
 ;;;
@@ -290,14 +290,17 @@ This package contains the binary.")
 (define-public mpg123
   (package
     (name "mpg123")
-    (version "1.25.0")
+    (version "1.25.2")
     (source (origin
               (method url-fetch)
-              (uri (string-append "mirror://sourceforge/mpg123/mpg123/" version
-                                  "/mpg123-" version ".tar.bz2"))
+              (uri (list (string-append "mirror://sourceforge/mpg123/mpg123/"
+                                        version "/mpg123-" version ".tar.bz2")
+                         (string-append
+                          "http://www.mpg123.org/download/mpg123-";
+                          version ".tar.bz2")))
               (sha256
                (base32
-                "0j2fyb984cwvhn8kicf87y39bhjsg43p14aj893hzq25n0fkwbjm"))))
+                "0f7fib7qyd9lah3fqcsjlqcni4bip4hw7iglkz3vz4fjibxv052k"))))
     (build-system gnu-build-system)
     (arguments '(#:configure-flags '("--with-default-audio=pulse")))
     (native-inputs `(("pkg-config" ,pkg-config)))