From d5ff67f411a6a91f2cfa589d185fbc025046f1db Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ludovic=20Court=C3=A8s?= <ludo@gnu.org>
Date: Tue, 11 Jul 2017 11:53:53 +0200
Subject: [PATCH] gnu: mpg123: Update to 1.25.2 [fixes CVE-2017-10683].

* gnu/packages/mp3.scm (mpg123): Update to 1.25.2.
---
 gnu/packages/mp3.scm | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/mp3.scm b/gnu/packages/mp3.scm
index 8a3a5809c7..789e596f84 100644
--- a/gnu/packages/mp3.scm
+++ b/gnu/packages/mp3.scm
@@ -1,6 +1,6 @@
 ;;; GNU Guix --- Functional package management for GNU
 ;;; Copyright © 2013 Andreas Enge <andreas@enge.fr>
-;;; Copyright © 2014, 2015 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2014, 2015, 2017 Ludovic Courtès <ludo@gnu.org>
 ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
 ;;; Copyright © 2016 Efraim Flashner <efraim@flashner.co.il>
 ;;;
@@ -290,14 +290,17 @@ This package contains the binary.")
 (define-public mpg123
   (package
     (name "mpg123")
-    (version "1.25.0")
+    (version "1.25.2")
     (source (origin
               (method url-fetch)
-              (uri (string-append "mirror://sourceforge/mpg123/mpg123/" version
-                                  "/mpg123-" version ".tar.bz2"))
+              (uri (list (string-append "mirror://sourceforge/mpg123/mpg123/"
+                                        version "/mpg123-" version ".tar.bz2")
+                         (string-append
+                          "http://www.mpg123.org/download/mpg123-"
+                          version ".tar.bz2")))
               (sha256
                (base32
-                "0j2fyb984cwvhn8kicf87y39bhjsg43p14aj893hzq25n0fkwbjm"))))
+                "0f7fib7qyd9lah3fqcsjlqcni4bip4hw7iglkz3vz4fjibxv052k"))))
     (build-system gnu-build-system)
     (arguments '(#:configure-flags '("--with-default-audio=pulse")))
     (native-inputs `(("pkg-config" ,pkg-config)))