* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
[not found] ` <20180412174906.CDFB12052F@vcs0.savannah.gnu.org>
@ 2018-04-12 18:09 ` Mark H Weaver
2018-04-12 18:15 ` Marius Bakke
0 siblings, 1 reply; 3+ messages in thread
From: Mark H Weaver @ 2018-04-12 18:09 UTC (permalink / raw)
To: Marius Bakke; +Cc: guix-devel
Hi Marius,
mbakke@fastmail.com (Marius Bakke) writes:
> mbakke pushed a commit to branch master
> in repository guix.
>
> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a
> Author: Marius Bakke <mbakke@fastmail.com>
> Date: Thu Apr 12 19:43:31 2018 +0200
>
> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
>
> * gnu/packages/web.scm (nghttp2): Update to 1.31.1.
Thank you for this, but it would entail far too many builds to update on
the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix
refresh -l', it would require 2839 rebuilds on x86_64.
Would you like to fix this with a graft instead?
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
2018-04-12 18:09 ` 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168] Mark H Weaver
@ 2018-04-12 18:15 ` Marius Bakke
2018-04-12 19:29 ` Mark H Weaver
0 siblings, 1 reply; 3+ messages in thread
From: Marius Bakke @ 2018-04-12 18:15 UTC (permalink / raw)
To: Mark H Weaver; +Cc: guix-devel
[-- Attachment #1: Type: text/plain, Size: 890 bytes --]
Mark H Weaver <mhw@netris.org> writes:
> Hi Marius,
>
> mbakke@fastmail.com (Marius Bakke) writes:
>
>> mbakke pushed a commit to branch master
>> in repository guix.
>>
>> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a
>> Author: Marius Bakke <mbakke@fastmail.com>
>> Date: Thu Apr 12 19:43:31 2018 +0200
>>
>> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
>>
>> * gnu/packages/web.scm (nghttp2): Update to 1.31.1.
>
> Thank you for this, but it would entail far too many builds to update on
> the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix
> refresh -l', it would require 2839 rebuilds on x86_64.
On 'master', nghttp2 only has 1 dependent, the reverse curl dependency
was added in this 'core-updates'.
Since we haven't started the "full" core-updates on Hydra yet, I figured
it was okay. What do you think?
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
2018-04-12 18:15 ` Marius Bakke
@ 2018-04-12 19:29 ` Mark H Weaver
0 siblings, 0 replies; 3+ messages in thread
From: Mark H Weaver @ 2018-04-12 19:29 UTC (permalink / raw)
To: Marius Bakke; +Cc: guix-devel
Marius Bakke <mbakke@fastmail.com> writes:
> Mark H Weaver <mhw@netris.org> writes:
>
>> Hi Marius,
>>
>> mbakke@fastmail.com (Marius Bakke) writes:
>>
>>> mbakke pushed a commit to branch master
>>> in repository guix.
>>>
>>> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a
>>> Author: Marius Bakke <mbakke@fastmail.com>
>>> Date: Thu Apr 12 19:43:31 2018 +0200
>>>
>>> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168].
>>>
>>> * gnu/packages/web.scm (nghttp2): Update to 1.31.1.
>>
>> Thank you for this, but it would entail far too many builds to update on
>> the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix
>> refresh -l', it would require 2839 rebuilds on x86_64.
>
> On 'master', nghttp2 only has 1 dependent, the reverse curl dependency
> was added in this 'core-updates'.
Ah, sorry for the mistake. I just reverted my revert.
> Since we haven't started the "full" core-updates on Hydra yet, I figured
> it was okay. What do you think?
Okay. I just merged master into core-updates, so that those of us
tracking core-updates can start rebuilding it again.
Thanks,
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-04-12 19:30 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <20180412174905.23638.55280@vcs0.savannah.gnu.org>
[not found] ` <20180412174906.CDFB12052F@vcs0.savannah.gnu.org>
2018-04-12 18:09 ` 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168] Mark H Weaver
2018-04-12 18:15 ` Marius Bakke
2018-04-12 19:29 ` Mark H Weaver
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).