From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id GCs8DRhxHWdvawAAqHPOHw:P1 (envelope-from ) for ; Sat, 26 Oct 2024 22:45:44 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id GCs8DRhxHWdvawAAqHPOHw (envelope-from ) for ; Sun, 27 Oct 2024 00:45:44 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=Fm2lxrFS; dkim=fail ("headers rsa verify failed") header.d=ngraves.fr header.s=ovhmo4487190-selector1 header.b=d2VI4GWY; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1729982743; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; b=t/mJSaBhK1Zyq2gQvZVWJI77o8v556Si4aWGbAu9/IdybO1ZLm+QPs5GXAjpTjoANsaYqf wLjSBNRKy25QH6nP5MNOR6+VYaNuvh8RTmM3UPNRBjr7gFQFp0nrtZ3v2CabEdL1FXv4RS VXyYDoyHVXVIh638652zP4DkOPbjrrGWlot7tyq4TC5qF5kz/rM9O9b4hKhZun0skejW2O 8AXtoFMr0j4wACdGDvYgtSo8/n8MWrAbZ8mJB4DOwQI7A/eqJjolfTjk5R8ZSRW6ZApFMd Xu2LCvKeWd/BHjEis4T6AjYGy04vZENga6yxF+LFiaazSzJOrRqcyDGVoCOJBA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=Fm2lxrFS; dkim=fail ("headers rsa verify failed") header.d=ngraves.fr header.s=ovhmo4487190-selector1 header.b=d2VI4GWY; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1729982743; a=rsa-sha256; cv=none; b=eLDhALeKL/4e0M6X33ajbHYX8V0+XJD4e9I2BhdROPrj5jjCs2BaWTkV8MS6qMUSImPrHi pYCKJxueFrDUGahsHP/oREygVs2zuU1FDfsNJBFBwvXrC30yQ9BF7Se7+bfxUCOCHADeeo BsYWbKC1FHb8djS9jqrcsLkFPl6SZCZchD/CGto6qDN9fSSPNS4UmTm5jwcMEDt9L0GoJj z2JxQnoRdDWaS1C1doN83CZVKLVPFGtfR9x0+P+z5MteRqZn/5yaUHrM+k3udonwbggpl8 81CGpLgak+HKmK2UxM4SKYtFg4wzHNgZ63LoBElQkobbZxKciXW6bK8IYsnwdQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BF2884508E for ; Sun, 27 Oct 2024 00:45:43 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWM-0000zd-AH; Sat, 26 Oct 2024 18:44:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0000xq-Ax for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0007SE-2Y for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; b=Fm2lxrFSoXT9RmqSWnjIfvJ+oT9gNR1l4Qz5DoiBhYDSTwmklGQmiqUnLmmPrgvtm32yehLF89bqDwiT/uwHDo+23Z9ny05GmSVqZPhp70VTBSsYVl11gj7iMNxLMB7yDOnj+qSBfPKXEuywjETr/jQ9si/nX/Lx85Fmlj7yEApRHPnKPylMJ98OOi7Af8XGPSr/Bxabq0XWw4+AywoIz9Cclv88Ik9VV/FSYxvyCEia2OvEFQUQOO7xtycKcauehF1oMVYPvzHL8Ydu8FNOz29pNdvsrcjRVZISmHoyFY51Z1D1rR29xIZbFkgceoOhck3sRT9OB5hyFhiAaJBiIw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWr-0006r0-Pi for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 16/24] gnu: gifsicle: Update to 1.95. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267626171 (code B ref 74035); Sat, 26 Oct 2024 22:45:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:36 +0000 Received: from localhost ([127.0.0.1]:43071 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006nx-8f for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from 7.mo560.mail-out.ovh.net ([188.165.48.182]:45113) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWG-0006n5-0b for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.148.29]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSn34bcz1Tpp for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-q595r (unknown [10.110.113.119]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 3DEA41FD91; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-q595r with ESMTPSA id rnn2B6lwHWdYXAIAZhMXkw (envelope-from ); Sat, 26 Oct 2024 22:43:53 +0000 X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:37 +0200 Message-ID: <20241026224300.30694-16-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8118019806977647330 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfelhedvtdeffefhhfdttdelffeikeejheefvdduvdekueejgeeffedutdekffevnecuffhomhgrihhnpehltggufhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982633; v=1; b=d2VI4GWYeyZhcuibt9BnnAYwTM+v/5OBktg0y+URD4EdGtIoup8RUlOuMajlt4xQZLyoFjkV mbduhMN0qjRMNJ03F92sIcM9AAig4NHLds1JXrt5XOl4re+kLB49tXHWw7HcZPlcLbixEMnQbHI 93id11Fq24VDOZ0kaTigsP7oSiKs4jdztRe4Vuh2WC1Klz4f0C6n0qc4NhoF6jstfTlNt3IkWLT MVzrtlXPRMRHUQldrJCVjKFJQuVU7b7/AD9Dfc3Pv9HryoXJ5IEIgISut4/g+/paEidiDIxb3gp XoNmu0C9NTm/WNm7Z9gJbIIbJ2muzXzOEbF6lvh6QCyrQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches From: Nicolas Graves via Guix-patches via Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx11.migadu.com X-Migadu-Spam-Score: 0.52 X-Spam-Score: 0.52 X-Migadu-Queue-Id: BF2884508E X-TUID: AUHlGn/wScgZ This fixes CVE-2023-44821 and CVE-2023-46009. * gnu/packages/image.scm (gifsicle): Update to 1.95. --- gnu/packages/image.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index 7f17c71aef..0d6593dc21 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -2172,14 +2172,14 @@ (define-public swappy (define-public gifsicle (package (name "gifsicle") - (version "1.94") + (version "1.95") (source (origin (method url-fetch) (uri (string-append "https://www.lcdf.org/gifsicle/gifsicle-" version ".tar.gz")) (sha256 - (base32 "16zq5wd6fyjgy0p0mak15k3mh1zpqb9rg6gqfpg215kqq02p1jab")))) + (base32 "0l69gn562l7a1l10zz1bfs756ipd682idgpk60qs3llz013icwdj")))) (build-system gnu-build-system) (arguments '(#:phases -- 2.46.0