From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Chicken security bugs [was Re: [peter@more-magic.net: Irregex packages should be updated to 0.9.6]] Date: Fri, 16 Dec 2016 14:36:59 -0500 Message-ID: <20161216193659.GA26067@jasmine> References: <20161216193319.GA12690@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="jRHKVT23PllUwdXP" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42292) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cHyJW-0005hs-H2 for guix-devel@gnu.org; Fri, 16 Dec 2016 14:37:07 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cHyJR-0004KE-R2 for guix-devel@gnu.org; Fri, 16 Dec 2016 14:37:06 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:51119) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cHyJR-0004K4-Mc for guix-devel@gnu.org; Fri, 16 Dec 2016 14:37:01 -0500 Received: from localhost (c-73-188-17-148.hsd1.pa.comcast.net [73.188.17.148]) by mail.messagingengine.com (Postfix) with ESMTPA id EAB247E451 for ; Fri, 16 Dec 2016 14:37:00 -0500 (EST) Content-Disposition: inline In-Reply-To: <20161216193319.GA12690@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org --jRHKVT23PllUwdXP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Dec 16, 2016 at 02:33:19PM -0500, Leo Famulari wrote: > We fixed this bug in our guile-irregex package in commit fb73f07a0fe, > but our chez-irregex and chicken packages are still vulnerable. Also note that (I believe) our chicken package is vulnerable to CVE-2016-{6830,6831}: http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00002.html --jRHKVT23PllUwdXP Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlhUQlsACgkQJkb6MLrK fwjKiBAAmt7ZuWRIZWvXJY4LoGYBS+t/xOCsFouEhnuHjlNYAtY5/3CjlByzKlck cwmPvoxST5Y6X1xY2B5eSqciLP06jUDAmMAEFhDqVBYz3sboZq++ROmYIQ9kMi8K rmJQoRCu++XNtzCtENgG0TgcG8me3I5xUZYlj7T9lMKrj/Q8MoLf8XiZpBDmWsVE 6GkYqxvFt0LfAGvfBGwk5ZKuDtpy4b/+zQG5Zp1dE5lrOLKUytM9eKBqwlchobzn sX3J+2M+Nz/kguhRQlgRHfym1FHsbjgPepxcQ7SlxmVWmmxtO1tfhOpoXjaU2JwW BRZVNtiqI4aHmPtoLHUzfuKmH3AKzmOLLI6h2aU3mGQ3c57B/wLcBrFwCPoIrzW6 x8BAE9g8sYMP92glhYESRsXcE3GqTGmxe0iLYPP6vGlTsg5MQ1SUMbZyuwaMZz8M 4yyY1UvP5J5XJv84DlO2ki0fj1knMwmbKxWZUmnULGDJjuMhd+MF5ThK8AQdpReS HN3+mq5EQbQQK4a0zDM510mXXwQsNoH0Hf8/fgMORPYKSWXEZuM6RukfmlnD6tMM SoIJm21seX+7+QKFGQVXB4GSfDCGJT2pib/ZRqAyCvt0p4Nufr/uv/e0D9NGUyCl zZUsgSWHzOcZcPAbQjseHyzzV8tzuOfdc706P5EO6xQytCre3JM= =CIFp -----END PGP SIGNATURE----- --jRHKVT23PllUwdXP--