* IMPORTANT: expat security update
@ 2016-03-25 21:16 Mark H Weaver
2016-03-25 21:25 ` Mark H Weaver
0 siblings, 1 reply; 3+ messages in thread
From: Mark H Weaver @ 2016-03-25 21:16 UTC (permalink / raw)
To: guix-devel
I just pushed a security update for expat. See:
https://lwn.net/Articles/681356/
I recommend that you update ASAP.
Note that Icecat includes a bundled copy of expat, so I guess it is
probably still vulnerable. I hope to update it some time in the next
few hours. For now, you might want to use Epiphany.
Also note that this introduces grafts back into master, unfortunately.
It might be that releasing 0.9.1 without grafts is too much to hope for.
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: IMPORTANT: expat security update
2016-03-25 21:16 IMPORTANT: expat security update Mark H Weaver
@ 2016-03-25 21:25 ` Mark H Weaver
2016-03-26 11:52 ` Ludovic Courtès
0 siblings, 1 reply; 3+ messages in thread
From: Mark H Weaver @ 2016-03-25 21:25 UTC (permalink / raw)
To: guix-devel
Mark H Weaver <mhw@netris.org> writes:
> I just pushed a security update for expat. See:
>
> https://lwn.net/Articles/681356/
Bah, nevermind. I already fixed this bug last July, in commit
99e29da15690a696690b28b065e0d1b19c9610db. That's embarrassing.
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: IMPORTANT: expat security update
2016-03-25 21:25 ` Mark H Weaver
@ 2016-03-26 11:52 ` Ludovic Courtès
0 siblings, 0 replies; 3+ messages in thread
From: Ludovic Courtès @ 2016-03-26 11:52 UTC (permalink / raw)
To: Mark H Weaver; +Cc: guix-devel
Mark H Weaver <mhw@netris.org> skribis:
> Mark H Weaver <mhw@netris.org> writes:
>> I just pushed a security update for expat. See:
>>
>> https://lwn.net/Articles/681356/
>
> Bah, nevermind. I already fixed this bug last July, in commit
> 99e29da15690a696690b28b065e0d1b19c9610db. That's embarrassing.
No, it means you’re trying to keep us safe, that’s fine. :-)
Ludo’.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2016-03-26 11:52 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-03-25 21:16 IMPORTANT: expat security update Mark H Weaver
2016-03-25 21:25 ` Mark H Weaver
2016-03-26 11:52 ` Ludovic Courtès
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).