From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: NSS test failure on armhf Date: Thu, 20 Apr 2017 14:49:35 -0400 Message-ID: <20170420184935.GA6382@jasmine> References: <874lxmlodc.fsf@fastmail.com> <20170417215234.GA32573@jasmine> <87k26e7wkq.fsf@netris.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="17pEHd4RhPHOinZp" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:47910) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d1H9F-0003Hc-H7 for guix-devel@gnu.org; Thu, 20 Apr 2017 14:49:46 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d1H9C-00058I-HD for guix-devel@gnu.org; Thu, 20 Apr 2017 14:49:45 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:44921) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1d1H9C-00057k-AU for guix-devel@gnu.org; Thu, 20 Apr 2017 14:49:42 -0400 Content-Disposition: inline In-Reply-To: <87k26e7wkq.fsf@netris.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Mark H Weaver Cc: guix-devel@gnu.org --17pEHd4RhPHOinZp Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Apr 20, 2017 at 02:39:17PM -0400, Mark H Weaver wrote: > It turns out that the bug fix in 3.30.1 is critical: it fixes > CVE-2017-5461, a potential remote code execution vulnerability. 3.30.2 > has since been released, so I'm currently testing it and will push an > update to it soon. Any issues on armhf will need to be dealt with in > another way. Yikes, good catch! --17pEHd4RhPHOinZp Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlj5Ar8ACgkQJkb6MLrK fwiQSBAAwufO6xm9o4CXxs4rDs0uyIRBBu+ofGcvrPFc0OCy0LKwR0MnqQgpNKGZ 7VLMUStNlPm4GDXIZgVonBk72o1RbVQyt895zOsnByKH34gjk5gEQLRe5rfvWT5q +FADe2QthaxYl3V0Q6PmrGb6DX9Xwc2O6+r20mBI1s5cdi14rZAQ5YehUquORZUA muwzuAGperKfsZqXadBQ/KS9FzuHjW1vjWl6c1LHraAFMQ0qdVh/UOrssTvzJdQ1 UNh0NfxuJDxUfO10V/td8qY4BVxqT615X6xRrQZIr42UoJZ55wbLfzjUqiuKW8Up pQJVPz0TlTMF0O6ESX/ZmPdpIXEfVwk6Vow9Uxt2yx2JxwJeyQMml66kHTuZwSIb X1ETCE19kJNKRqC/K4LE/mBlsRz1SdazixBxyI5sA20MK0lunoSOMZqCTmgcjpfa 3R5dg5sXv4lGbrXVinQIPERIpQp0RKZsns8j4qdBHVBKJt+qQrh3t9gsqQDeNrSo lo9Ly57Jz9EtA8D3r3lOTnUZ4yugpYNepU5BI/PpIKTRyahK3YAtAS1aWPYJTvx+ ZeYHtEQKsWR/WNcBqDyl6U6Hf7szp0KFvol7Vqytc5msNMzNK8c9zPTkSYOF/uFs C163BrX8TGYmCGrVmJC0IHTbr6sxunRSihLLwOY/lNn217ag50c= =KdUu -----END PGP SIGNATURE----- --17pEHd4RhPHOinZp--