unofficial mirror of guix-devel@gnu.org 
 help / color / mirror / code / Atom feed
From: Efraim Flashner <efraim@flashner.co.il>
To: Leo Famulari <leo@famulari.name>
Cc: guix-devel@gnu.org
Subject: Re: [PATCH 1/1] gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167].
Date: Wed, 14 Sep 2016 21:03:03 +0300	[thread overview]
Message-ID: <20160914180302.GG31892@macbook42.flashner.co.il> (raw)
In-Reply-To: <f38956f466b2d89c6758e5ee1e47d4a45e5eb10f.1473873760.git.leo@famulari.name>

[-- Attachment #1: Type: text/plain, Size: 1676 bytes --]

On Wed, Sep 14, 2016 at 01:23:20PM -0400, Leo Famulari wrote:
> * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.3.
> (curl-7.50.2): Replace with ....
> (curl-7.50.3): ... this.
> ---
>  gnu/packages/curl.scm | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
> index f3c0ade..5cd8086 100644
> --- a/gnu/packages/curl.scm
> +++ b/gnu/packages/curl.scm
> @@ -40,7 +40,7 @@
>  (define-public curl
>    (package
>     (name "curl")
> -   (replacement curl-7.50.2)
> +   (replacement curl-7.50.3)
>     (version "7.47.0")
>     (source (origin
>              (method url-fetch)
> @@ -125,15 +125,15 @@ tunneling, and so on.")
>                                    "See COPYING in the distribution."))
>     (home-page "http://curl.haxx.se/")))
>  
> -(define curl-7.50.2
> +(define curl-7.50.3
>    (package
>      (inherit curl)
>      (source
> -      (let ((version "7.50.2"))
> +      (let ((version "7.50.3"))
>          (origin
>            (method url-fetch)
>            (uri (string-append "https://curl.haxx.se/download/curl-"
>                                version ".tar.lzma"))
>            (sha256
>             (base32
> -            "0d5ly1xms0hh5zkv0m77d50c1816ywmbvmi1m158jyl70ndi9gby")))))))
> +            "1spmk0345hq0sgpwxs8d410268lmg3wf1x9v23hxff7wxki5fm4c")))))))
> -- 
> 2.10.0
> 
> 

Looks straightforward.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

  reply	other threads:[~2016-09-14 18:03 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-09-14 17:23 [PATCH 0/1] curl: Fix CVE-2016-7167 Leo Famulari
2016-09-14 17:23 ` [PATCH 1/1] gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167] Leo Famulari
2016-09-14 18:03   ` Efraim Flashner [this message]
2016-09-14 18:12     ` Leo Famulari

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160914180302.GG31892@macbook42.flashner.co.il \
    --to=efraim@flashner.co.il \
    --cc=guix-devel@gnu.org \
    --cc=leo@famulari.name \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).