From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:51134) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ekir3-0002Bt-At for guix-patches@gnu.org; Sat, 10 Feb 2018 23:03:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ekir0-0005Ws-Gj for guix-patches@gnu.org; Sat, 10 Feb 2018 23:03:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:57879) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ekir0-0005Wn-DF for guix-patches@gnu.org; Sat, 10 Feb 2018 23:03:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ekir0-00072n-5W for guix-patches@gnu.org; Sat, 10 Feb 2018 23:03:02 -0500 Subject: bug#30416: [PATCH] gnu: libtasn1: Fix CVE-2018-6003. Resent-To: guix-patches@gnu.org Resent-Message-ID: Date: Sat, 10 Feb 2018 23:02:37 -0500 From: Leo Famulari Message-ID: <20180211040237.GA8180@jasmine.lan> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XsQoSWH+UP9D9v3l" Content-Disposition: inline In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Marius Bakke Cc: 30416-done@debbugs.gnu.org --XsQoSWH+UP9D9v3l Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Feb 11, 2018 at 02:31:08AM +0100, Marius Bakke wrote: >=20 >=20 > On February 10, 2018 10:54:44 PM GMT+01:00, Leo Famulari wrote: > >* gnu/packages/patches/libtasn1-CVE-2018-6003.patch: New file. > >* gnu/local.mk (dist_patch_DATA): Add it. > >* gnu/packages/tls.scm (libtasn1/fixed)[source]: Use it. >=20 > LGTM. I think we already ungrafted the fixed version on core-updates, > so I guess we should merge and "re-graft" this new patch. Yeah, I'll do it shortly. Pushed as 31c7002b466c6d09400a95bc15774f232b51ce0b --XsQoSWH+UP9D9v3l Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlp/wF0ACgkQJkb6MLrK fwg17g//Xk/cv6nNDAw6k4Fdduc8BcBKrftDEL097Qx2sGv5euQT4nV73cxqSYQR //dpUGlsVn8X3VVXdBf8TwiZZR3+Qy6EHP9WEqGBBV2tffpylv8AEdMWg3lncqVE RclvcQCL/9oyLKY0EEc1MJ3MQes0H33XrRLaJx3WCKGLZqJlaJsgiWdBbmBpwa77 dIU26xzfXt+PkxLQtIY6FMGuOyRmIgzlwLLTz3gU/dLwFvsOAjcVu7EQEybw9F0n 6/OvQ7KcSJy+2LrLw1HsY/GfGMqSO/eorq3zXJS5uTaDA9RjHbYfieGN0vGp9q+q JFbU8pvImjNc/T/WWfoqy3zCWCrMEVd/tr5gRbUoP2WpUVvhgk0rEPy4DzKjKcEt Pvfl5dq1J/ENDfOQ4HGu5MNuadSVUqKpPdGO9kg6g+yF+Mw1XQd9WOPuo5bKZJYx 2jP9edeRCJnFLlPsEAHyZNtFoysRi+o21sZOXkTCVzWD53hmRLI4edvMsHguErdG YWfLrg0DmtmcS2BxBn1uCR7GwQSG+rybAqr368/NfGFkUA+/zo8BuR3dZTWW5oVZ hi8w2b3KNAwX3NPgRNsmH6/KPBpZdyDdoQlkIdLRCCVJz3k8Bq/cCBsMvkyH2g/M MPlt5lsgQmXDNM3umbjI90qlK4at0udl/BJc5WwvS6hFf01O2D8= =8LdE -----END PGP SIGNATURE----- --XsQoSWH+UP9D9v3l--