From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: bug#26109: [PATCH 3/7] gnu: Add dcmtk. Date: Mon, 20 Mar 2017 22:13:31 -0400 Message-ID: <20170321021331.GB29321@jasmine> References: <1489608324-23632-1-git-send-email-jmd@gnu.org> <1489608324-23632-3-git-send-email-jmd@gnu.org> <871stv7hyk.fsf@openmailbox.org> <20170318072335.GA12217@jocasta.intra> <87mvci5ze3.fsf@openmailbox.org> <20170318173630.GA14983@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="0ntfKIWw70PvrIHh" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:38226) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cq9Il-0000VK-HL for guix-devel@gnu.org; Mon, 20 Mar 2017 22:13:36 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cq9Ii-0008GW-DY for guix-devel@gnu.org; Mon, 20 Mar 2017 22:13:35 -0400 Content-Disposition: inline In-Reply-To: <20170318173630.GA14983@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: John Darrington Cc: guix-devel@gnu.org, 26109@debbugs.gnu.org --0ntfKIWw70PvrIHh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Mar 18, 2017 at 01:36:31PM -0400, John Darrington wrote: > [CC guix-devel@gnu.org] >=20 > So we have to make a choice: >=20 > 1. Package a released program with a known vulnerability; or Although all non-trivial software contains bugs, many of which can be exploited, we should not add new packages with known exploitable vulnerabilities. --0ntfKIWw70PvrIHh Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAljQjEoACgkQJkb6MLrK fwhXgw//ZoDTAmh5fCjRE0DMBt8OBziXO2q1VLL66S3/SkD1PKAJaSyd2+M0RXn6 QOhTm0nec/ZVya0BI5XXO2Bcx6aUejPYL9kD+GhuQf5yZCo2MSwFwNh/QYv2teJa faX+Z61NafV+L0HR8x3vt1lhuN5b7nwpY5lkJCLTcUxSz3XMNKUbmW+W2CK8Gr5H 6CbBhQtQO9RbUwutBjIcdPDUInGQDcRlCMoFv+GKydtuJpHD1ZrxiMZU6XsF+VhL utdhR2SOzQqBrKG5kKudI7+8Iemho2OmFoGovQRULjZ59Po1mPpZHNFXUYpkW9Mz AGrI4QDCQdJxp5Ie2+twyTLsxUrobf7edoB7u2bsJSSTEI0lcZY4zADdc+kOu/wX Pgq9RmLggYQlDsMrZYrdwDVUIY1bbcQWtGV6sIOdIrwjJ7PxKjhb3Wa6WCB6/0UW xzPWwKkldQkW4+gBlDdajO42RrPq73Gaa8y6G6H4KPwQya/n+PIF8ooLVNkMPn7o 0PE5NrObzDjWEFRHfqD2S+gEr+qLB6/cUUFYexmkPst6sqZlStz0byI4qpdUqSXF 3nYtebGtStTFG4941NYdw84dHjcfwQv5BGQEHHpAPjkGA6C9NawIt8/q3kUHm8TA g6x4IcG2hV918DmHfLSsrj8etJD9Xpb8pOlmbqk7HQGJgT49KTU= =iiG8 -----END PGP SIGNATURE----- --0ntfKIWw70PvrIHh--