From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#27939: FreeRDP CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 Date: Thu, 17 Aug 2017 16:56:56 -0400 Message-ID: <20170817205656.GA5167@jasmine.lan> References: <20170804145615.GB14950@jasmine.lan> <20170809.190519.1494032557728578699.post@thomasdanckaert.be> <877eyc4e8s.fsf@fastmail.com> <20170816.223740.626580343004026366.post@thomasdanckaert.be> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="HlL+5n6rz5pIUxbD" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45118) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1diRql-00065Y-H7 for bug-guix@gnu.org; Thu, 17 Aug 2017 16:57:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1diRqg-0000Df-Io for bug-guix@gnu.org; Thu, 17 Aug 2017 16:57:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:34534) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1diRqg-0000DV-5S for bug-guix@gnu.org; Thu, 17 Aug 2017 16:57:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1diRqf-0002AX-OV for bug-guix@gnu.org; Thu, 17 Aug 2017 16:57:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <20170816.223740.626580343004026366.post@thomasdanckaert.be> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Thomas Danckaert Cc: 27939-done@debbugs.gnu.org --HlL+5n6rz5pIUxbD Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Aug 16, 2017 at 10:37:40PM +0200, Thomas Danckaert wrote: > With some delay... here's a patch to revert freerdp to the tip of upstream > branch 1.1 (which includes the CVE fixes, backported by the FreeRDP > maintainers), and allow vinagre to build against that. Vinagre is the on= ly > Guix package which uses freerdp, so I think it's ok to just have freerdp > branch 1.1 for now (1.1 is also the last =E2=80=9Cstable=E2=80=9D branch). >=20 > If you agree, I'll push this patch, and close this bug. That sounds good to me. Thanks! --HlL+5n6rz5pIUxbD Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmWAxUACgkQJkb6MLrK fwjT3RAAx7fFL9YhkZKoJLQAONA5jaSSVa6nPg6UKdlLsfNT3bMS0jNOa1JAYmiA 538ENU50Dyu35g/YHolV1DmARvOBBxxoj01TfOPz+wG4OMbAN8hmoH7YifODEEIN J9OR7tJXft8Abn6dxg9/Mhk/1IIy9Wgx6QqfJ4Kw4xo8xf6XrO+u123qVtiq+0UW 9I0XjR1TWOdjCsQ5PtRa+tI9GtfBEsUn+NkVGln9KgSH7LfoTV/QBViealzADXII p5p9gWwG5tLN08lUsO6oPRT7uCePi2zLvWuWnpYq/ojyeslYIh7mL6wN57CAUVfZ W7/JZCDXCFBJ9qGz5T0mzdGOmq38xqZuFYRZqrB+g7eF1UHtMn8VAImsMhAmzpKL M8poRkBrLbRD3NZmSoIUCZEgmwy8DRSfGexEwn/cSTci4Sy4bvh1hNOxVnSBKh8u vZ60jAeLoGYrdbhhrlBYJPTHChRGbXjsIGyCDKdnEpidtp5bub0nedSazUuj8x6b Rbd8/TErAyarkGM3YfMIQcRvSpallVpGmjRjK0EKKGVlVHNePrcb3/e+MHdyFXa7 49NAY5KYnBikrWt/SwHV1GSYlqw3vBRwhQ/zVATQ3Uu9q0bgqovQDciaVhxZ3t4b vdF5CZ+MAebxB+86daxujus8uNQOPowg3HwaoBMlI2mhfmjxqMA= =0pdb -----END PGP SIGNATURE----- --HlL+5n6rz5pIUxbD--