From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id MNIQGp0voF/lHwAA0tVLHw (envelope-from ) for ; Mon, 02 Nov 2020 16:11:09 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id MEDtFZ0voF/kFAAAbx9fmQ (envelope-from ) for ; Mon, 02 Nov 2020 16:11:09 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E01219407EB for ; Mon, 2 Nov 2020 16:11:08 +0000 (UTC) Received: from localhost ([::1]:34392 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kZcQF-00025H-SF for larch@yhetil.org; Mon, 02 Nov 2020 11:11:07 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:38686) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kZcQA-000258-BH for guix-patches@gnu.org; Mon, 02 Nov 2020 11:11:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:59006) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kZcQA-0006aG-2B for guix-patches@gnu.org; Mon, 02 Nov 2020 11:11:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kZcQ9-0008Ng-Ue for guix-patches@gnu.org; Mon, 02 Nov 2020 11:11:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#44302] [PATCH] gnu: httpie: Update to 2.3.0. Resent-From: Tanguy Le Carrour Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 02 Nov 2020 16:11:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 44302 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 44302-done@debbugs.gnu.org Received: via spool by 44302-done@debbugs.gnu.org id=D44302.160433343932184 (code D ref 44302); Mon, 02 Nov 2020 16:11:01 +0000 Received: (at 44302-done) by debbugs.gnu.org; 2 Nov 2020 16:10:39 +0000 Received: from localhost ([127.0.0.1]:42318 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kZcPn-0008N2-IB for submit@debbugs.gnu.org; Mon, 02 Nov 2020 11:10:39 -0500 Received: from relay4-d.mail.gandi.net ([217.70.183.196]:52753) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kZcPl-0008Mq-NL for 44302-done@debbugs.gnu.org; Mon, 02 Nov 2020 11:10:38 -0500 X-Originating-IP: 176.159.32.89 Received: from localhost (176-159-32-89.abo.bbox.fr [176.159.32.89]) (Authenticated sender: tanguy@bioneland.org) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 9875AE0026; Mon, 2 Nov 2020 16:10:31 +0000 (UTC) Date: Mon, 2 Nov 2020 17:10:31 +0100 From: Tanguy Le Carrour Message-ID: <20201102161031.ogmmzgzl3kmufhb2@rafflesia> References: <20201029094754.15006-1-tanguy@bioneland.org> <87k0v6rqhu.fsf@gnu.org> <161AB850-BDF5-4265-9F4C-DF9936FD896B@bioneland.org> <875z6nkbc6.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <875z6nkbc6.fsf@gnu.org> X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.0 (-) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: -0.51 X-TUID: gMacHDB0eIM3 Hi, Le 11/02, Ludovic Courtès a écrit : > Tanguy LE CARROUR skribis: > > >>‘guix lint’ says “probably vulnerable to CVE-2019-10751”. Would be > >>nice > >>if you could take a look and see what needs to be done about it. > > > > I saw that! But it only applies to older versions of httpie. Should I have mentioned it somewhere? In the commit message? > > If you’re sure of that, you can add a ‘lint-hidden-cve’ property with a > comment linking to evidence that this is fixed. Done! http://debbugs.gnu.org/cgi/bugreport.cgi?bug=44392 Regards -- Tanguy