From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#32878: Python-3 CVE-2018-14647 Date: Wed, 10 Oct 2018 15:26:01 -0400 Message-ID: <20181010192601.GB22832@jasmine.lan> References: <20180929192302.GB17619@jasmine.lan> <87sh1ji0x0.fsf@fastmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="WhfpMioaduB5tiZL" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49168) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gAK8Q-0006WH-VR for bug-guix@gnu.org; Wed, 10 Oct 2018 15:27:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gAK8M-0003BX-2b for bug-guix@gnu.org; Wed, 10 Oct 2018 15:27:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:39608) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gAK8L-0003BR-So for bug-guix@gnu.org; Wed, 10 Oct 2018 15:27:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gAK8L-0001G8-K8 for bug-guix@gnu.org; Wed, 10 Oct 2018 15:27:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <87sh1ji0x0.fsf@fastmail.com> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Marius Bakke Cc: 32878@debbugs.gnu.org --WhfpMioaduB5tiZL Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Oct 06, 2018 at 04:51:07PM +0200, Marius Bakke wrote: > From a60d655fd4dddb86e1c8134c675fb61af52b32af Mon Sep 17 00:00:00 2001 > From: Marius Bakke > Date: Sat, 6 Oct 2018 16:47:05 +0200 > Subject: [PATCH] gnu: python: Fix CVE-2018-14647. >=20 > * gnu/packages/patches/python-CVE-2018-14647.patch: New file. > * gnu/local.mk (dist_patch_DATA): Register it. > * gnu/packages/python.scm (python-3/fixed): New variable. > (python-3.6)[replacement]: New field. > (python-minimal, python-debug, wrap-python3): Use PACKAGE/INHERIT instead= of > standard inheritance. Thanks! I did some more basic tests with this one, using the extra hunk in your other mail. I think this change is okay. --WhfpMioaduB5tiZL Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlu+UkkACgkQJkb6MLrK fwhXdw/+J+My56nC1+9G3+zL5OFyEmVWgtAxhxL3QrfcoZoZRoUtHIDo3nhuZMkm lgtAWxR6qMZA76KWyQiJ4nLo7HreyPwXMrv+jInjKFTv4ABWNjuCtQWKoFH9gVwe Jo/MRTlAzgFKzXBzi7X0XrDpxJ04oHLV/+/yt8SO//I/2O5ZFnyjoC1u4OtDdzIL vUwyWBt/GMcIeVAcolU1mC19o3VJ00TD9VbORMxXdcJRmRkHrYEZ5FxfKSelTIUL GKrm8M3VVCbAKjf17jSkQpYGqwCOhHKupoG7HhivGREAAkdbdd0loOtQ+oMplk2A VOofMA73xrKZIMz1pcVScTSwnUzW2PeU6Ci6gOVkaSkGf+eK/pi4A6vZ8cEzWi+q k2NxR/1zursvq2wxcgMFMpygfb0C9fXe0esXC1aXIy4NdfxbpKO/NmBWEZ54kVo/ 0bHEnbG1suxkBRImzPntlXiSvIhbDy6Xl80CsaK/DWbx5NkxcxK0/mji+eBEGDRl nWTUHzLkWqMLZ/uceaDnaQOxPTyIRzb/I10cxZf3C0jStEZNpLZv9KiV+RlQXx4Q ZqdrQ1cg9R2dparlN/Mbb6xfR8Frg1yj/YxswlgmK7k+k0Bk5Uc+53lrvnA+DIbW inLxXWeonI3ekii8syGctFr7I5oDYijV55t06wieb5m6d1VcGWs= =Bfcp -----END PGP SIGNATURE----- --WhfpMioaduB5tiZL--