From mboxrd@z Thu Jan 1 00:00:00 1970 From: Efraim Flashner Subject: Re: [PATCH 1/1] gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167]. Date: Wed, 14 Sep 2016 21:03:03 +0300 Message-ID: <20160914180302.GG31892@macbook42.flashner.co.il> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="QDd5rp1wjxlDmy9q" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34091) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bkEWj-0001ml-KL for guix-devel@gnu.org; Wed, 14 Sep 2016 14:03:18 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bkEWe-0002oN-KO for guix-devel@gnu.org; Wed, 14 Sep 2016 14:03:16 -0400 Received: from flashner.co.il ([178.62.234.194]:57023) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bkEWe-0002nZ-D6 for guix-devel@gnu.org; Wed, 14 Sep 2016 14:03:12 -0400 Content-Disposition: inline In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --QDd5rp1wjxlDmy9q Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 14, 2016 at 01:23:20PM -0400, Leo Famulari wrote: > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.3. > (curl-7.50.2): Replace with .... > (curl-7.50.3): ... this. > --- > gnu/packages/curl.scm | 8 ++++---- > 1 file changed, 4 insertions(+), 4 deletions(-) >=20 > diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm > index f3c0ade..5cd8086 100644 > --- a/gnu/packages/curl.scm > +++ b/gnu/packages/curl.scm > @@ -40,7 +40,7 @@ > (define-public curl > (package > (name "curl") > - (replacement curl-7.50.2) > + (replacement curl-7.50.3) > (version "7.47.0") > (source (origin > (method url-fetch) > @@ -125,15 +125,15 @@ tunneling, and so on.") > "See COPYING in the distribution.")) > (home-page "http://curl.haxx.se/"))) > =20 > -(define curl-7.50.2 > +(define curl-7.50.3 > (package > (inherit curl) > (source > - (let ((version "7.50.2")) > + (let ((version "7.50.3")) > (origin > (method url-fetch) > (uri (string-append "https://curl.haxx.se/download/curl-" > version ".tar.lzma")) > (sha256 > (base32 > - "0d5ly1xms0hh5zkv0m77d50c1816ywmbvmi1m158jyl70ndi9gby"))))))) > + "1spmk0345hq0sgpwxs8d410268lmg3wf1x9v23hxff7wxki5fm4c"))))))) > --=20 > 2.10.0 >=20 >=20 Looks straightforward. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --QDd5rp1wjxlDmy9q Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJX2ZDRAAoJEPTB05F+rO6TYPsP/3asxM0TAOMMgl5SEYGGVyXq Nfz3jMvANad45sNJKZJqLkmvipJDwSFWs9dGAUVA5GEH4OxM7JIbDpUBXMswnQxJ qSLey3c2T0vGyDbKStuK6NwBA0iZkrv1ouveqe7Z1QI+INjOXlc0JmcGd4BcAiVC JjGxUskir6+eJMfusR/V6Jvchuc9C+22jS8/z29dBbG4S0b7Gw027g1RLhkmOh4u SS3wmRSF+9nbAI1/IN6CeK2e2T3vBfKpPhThDNGFVKb2IgcYClqorhcXlDzAATAF CFKntuvUqSQPUUl1Qvco+b13UOJIluWYu7KDIiLfI7Ra67kaz5WlDNNq/ONxXGgw Yam6gOewSZ/e3WS0YRzfKR+UogZJFxzJlNLqVmn1b1Ma3otBG1e5jvdxO2sEJdOr HvLbBD53uyoGrNTnomohLXIe6JVTlDHvm3Pr11Ge0PjPQbt605rjrBVsRMUtqzJd wNDIOEIqOfT3IoTauUlsF7nGbC1A4XnXdiLdEas8mkI8q0UP3SrJyMqE2W6Z4aXc Vl0tloT9PxPRUZLw1VvwRATu9oo8H1YuRAafLXpdH6jPSOnmK9sl0S2mpEHewZ9/ VteYkTb0I8cGladgQlF9+3vTIt9d4VrkO9Nq4bsy9rUt5CKkYuW7GryvdTU5kPKy W63cc9L27RALRbAB5tgS =ELEs -----END PGP SIGNATURE----- --QDd5rp1wjxlDmy9q--