From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: [PATCH 1/1] gnu: perl: Replace with patched version [fixes CVE-2016-2381]. Date: Thu, 03 Mar 2016 17:33:46 +0100 Message-ID: <87ziufcyhh.fsf@gnu.org> References: <92cf16de48838de4d9d060886f0bc9915e8f52e1.1456947844.git.leo@famulari.name> <87io14czt1.fsf@gnu.org> <20160303040613.GA24614@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43462) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1abWCG-0002bo-T4 for guix-devel@gnu.org; Thu, 03 Mar 2016 11:33:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1abWCD-0000wd-NM for guix-devel@gnu.org; Thu, 03 Mar 2016 11:33:52 -0500 In-Reply-To: <20160303040613.GA24614@jasmine> (Leo Famulari's message of "Wed, 2 Mar 2016 23:06:13 -0500") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari skribis: > On Wed, Mar 02, 2016 at 10:52:58PM +0100, Ludovic Court=C3=A8s wrote: [...] >> Otherwise LGTM, as long as you confirm that nothing goes really wrong >> once it=E2=80=99s applied. :-) > > Here are some things I tried: > > 1) Built and booted a VM with `guix system vm`. I don't know if perl (as > opposed to perl-boot0) is used in this process, but it did work. > > 2) Built and installed git on top of it, and then rolled back the commit > and used `git add -i` to recreate it, and then `git send-email` to > submit it. Both of those tools are Perl scripts. These do sound like good tests. :-) Ludo=E2=80=99.