* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. [not found] ` <20180412174906.CDFB12052F@vcs0.savannah.gnu.org> @ 2018-04-12 18:09 ` Mark H Weaver 2018-04-12 18:15 ` Marius Bakke 0 siblings, 1 reply; 3+ messages in thread From: Mark H Weaver @ 2018-04-12 18:09 UTC (permalink / raw) To: Marius Bakke; +Cc: guix-devel Hi Marius, mbakke@fastmail.com (Marius Bakke) writes: > mbakke pushed a commit to branch master > in repository guix. > > commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a > Author: Marius Bakke <mbakke@fastmail.com> > Date: Thu Apr 12 19:43:31 2018 +0200 > > gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. > > * gnu/packages/web.scm (nghttp2): Update to 1.31.1. Thank you for this, but it would entail far too many builds to update on the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix refresh -l', it would require 2839 rebuilds on x86_64. Would you like to fix this with a graft instead? Mark ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. 2018-04-12 18:09 ` 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168] Mark H Weaver @ 2018-04-12 18:15 ` Marius Bakke 2018-04-12 19:29 ` Mark H Weaver 0 siblings, 1 reply; 3+ messages in thread From: Marius Bakke @ 2018-04-12 18:15 UTC (permalink / raw) To: Mark H Weaver; +Cc: guix-devel [-- Attachment #1: Type: text/plain, Size: 890 bytes --] Mark H Weaver <mhw@netris.org> writes: > Hi Marius, > > mbakke@fastmail.com (Marius Bakke) writes: > >> mbakke pushed a commit to branch master >> in repository guix. >> >> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a >> Author: Marius Bakke <mbakke@fastmail.com> >> Date: Thu Apr 12 19:43:31 2018 +0200 >> >> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. >> >> * gnu/packages/web.scm (nghttp2): Update to 1.31.1. > > Thank you for this, but it would entail far too many builds to update on > the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix > refresh -l', it would require 2839 rebuilds on x86_64. On 'master', nghttp2 only has 1 dependent, the reverse curl dependency was added in this 'core-updates'. Since we haven't started the "full" core-updates on Hydra yet, I figured it was okay. What do you think? [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 487 bytes --] ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. 2018-04-12 18:15 ` Marius Bakke @ 2018-04-12 19:29 ` Mark H Weaver 0 siblings, 0 replies; 3+ messages in thread From: Mark H Weaver @ 2018-04-12 19:29 UTC (permalink / raw) To: Marius Bakke; +Cc: guix-devel Marius Bakke <mbakke@fastmail.com> writes: > Mark H Weaver <mhw@netris.org> writes: > >> Hi Marius, >> >> mbakke@fastmail.com (Marius Bakke) writes: >> >>> mbakke pushed a commit to branch master >>> in repository guix. >>> >>> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a >>> Author: Marius Bakke <mbakke@fastmail.com> >>> Date: Thu Apr 12 19:43:31 2018 +0200 >>> >>> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. >>> >>> * gnu/packages/web.scm (nghttp2): Update to 1.31.1. >> >> Thank you for this, but it would entail far too many builds to update on >> the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix >> refresh -l', it would require 2839 rebuilds on x86_64. > > On 'master', nghttp2 only has 1 dependent, the reverse curl dependency > was added in this 'core-updates'. Ah, sorry for the mistake. I just reverted my revert. > Since we haven't started the "full" core-updates on Hydra yet, I figured > it was okay. What do you think? Okay. I just merged master into core-updates, so that those of us tracking core-updates can start rebuilding it again. Thanks, Mark ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-04-12 19:30 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <20180412174905.23638.55280@vcs0.savannah.gnu.org>
[not found] ` <20180412174906.CDFB12052F@vcs0.savannah.gnu.org>
2018-04-12 18:09 ` 02/03: gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168] Mark H Weaver
2018-04-12 18:15 ` Marius Bakke
2018-04-12 19:29 ` Mark H Weaver
Code repositories for project(s) associated with this public inbox https://git.savannah.gnu.org/cgit/guix.git This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).