From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH] gnu: gnutls: Replace with 3.5.8 [fixes GNUTLS-SA-2017-{1,2}]. Date: Tue, 10 Jan 2017 17:36:26 -0500 Message-ID: <20170110223626.GC8431@jasmine> References: <20170110181803.GB28153@jasmine> <20170110221532.3691-1-ludo@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="MW5yreqqjyrRcusr" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59836) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cR51r-000534-GV for guix-devel@gnu.org; Tue, 10 Jan 2017 17:36:32 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cR51o-0000Ua-El for guix-devel@gnu.org; Tue, 10 Jan 2017 17:36:31 -0500 Content-Disposition: inline In-Reply-To: <20170110221532.3691-1-ludo@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?iso-8859-1?Q?Court=E8s?= Cc: guix-devel@gnu.org --MW5yreqqjyrRcusr Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jan 10, 2017 at 11:15:32PM +0100, Ludovic Court=E8s wrote: > * gnu/packages/tls.scm (gnutls-3.5.8): New variable. > (gnutls)[replacement]: New field. > +(define-public gnutls-3.5.8 ;fixes GNUTLS-SA-2017-= {1,2} Typically these replacements are not exported. The last time I noticed an exported replacement, I found that it was resolved non-deterministically (using `guix build -S` in a loop), and we made the replacement private: http://git.savannah.gnu.org/cgit/guix.git/commit/?id=3D69aa6e0995b55a38d5ce= 174602a107645be726d5 --MW5yreqqjyrRcusr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlh1YeoACgkQJkb6MLrK fwhOTA//QXkJKi7YfgQ7QKFJ2maQQxPfnRT8UDhyyE8P6fvmZbOPMYGJwUSEfWoh 2WP/qE+PKOegCrg7xdD0iDIRbd1S5RCy+CLZevtVdQyc3llmlv9hMeQyeiUDGKE5 CZNG2bOn3H8ZR6Avm/wLQr0IMKmXE4WVAQvfGHkvnMWpzdsEUnFTA2ufhO0J35Ro a0MtcjItzyH5SUuERG/x8o9kcxSCyZz+xroP4g0tp7fqLALKJ+Eeyt4bvTtlMOws i4wZRtjWAUyyfDzmvSrYzpeH1Sb9xaLLkzZBDeuSVncGMgBkrg+8PCfj/dlnDSFC b3HFVqkcqdl6ezOCMaiXKsFRuPec+YYioe9CyCcgyUvN+kSD1zsOyrfsVQDojzqz /sfSafbeH+BRCewKwJZbgaswMW1ZUq736KGj8WcZn0ssHZXa0Ff5YpRfIvOYN3H7 2euyIBGoL3x1j6a1OaQ+F4ZiWpgGoFNrJXrFoPL3r/42+W6hmLADHKWFp10FhEOn hPKCju+L0XpuC4Rw/g5wegAd+PgLj/HAdq2SdUckGUXmbmv7OSQ61oWJyTEkSxbY rzDlqD35RKOctn6AxOqVjB0x460/aODZ+nYk/bN4B8woT2En/Gkcn64NEI3KK3ks pD2LkraoG/TrebKoOJqw8t+SIPJ45vkuluDvGESRWJQ9XiE7OCA= =O9yC -----END PGP SIGNATURE----- --MW5yreqqjyrRcusr--