From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id EGv/IJTmql6MHgAA0tVLHw (envelope-from ) for ; Thu, 30 Apr 2020 14:54:12 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id ELdNBJ7mql4rRAAAbx9fmQ (envelope-from ) for ; Thu, 30 Apr 2020 14:54:22 +0000 Received: from lists.gnu.org (lists.gnu.org [IPv6:2001:470:142::17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EC37B941EA6 for ; Thu, 30 Apr 2020 14:54:06 +0000 (UTC) Received: from localhost ([::1]:60030 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jUAZi-0006S0-VO for larch@yhetil.org; Thu, 30 Apr 2020 10:54:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:36742) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jUAZe-0006Re-VK for guix-patches@gnu.org; Thu, 30 Apr 2020 10:54:03 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.90_1) (envelope-from ) id 1jUAZe-0004p3-AQ for guix-patches@gnu.org; Thu, 30 Apr 2020 10:54:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:35941) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jUAZd-0004ow-U9 for guix-patches@gnu.org; Thu, 30 Apr 2020 10:54:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jUAZd-0006H7-MC for guix-patches@gnu.org; Thu, 30 Apr 2020 10:54:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#40979] Acknowledgement ([PATCH] gnu: libntlm: Update to 1.6 [fixes CVE-2019-17455].) Resent-From: Simon Josefsson Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 30 Apr 2020 14:54:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 40979 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 40979@debbugs.gnu.org Received: via spool by 40979-submit@debbugs.gnu.org id=B40979.158825843224106 (code B ref 40979); Thu, 30 Apr 2020 14:54:01 +0000 Received: (at 40979) by debbugs.gnu.org; 30 Apr 2020 14:53:52 +0000 Received: from localhost ([127.0.0.1]:47487 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jUAZF-0006GM-0e for submit@debbugs.gnu.org; Thu, 30 Apr 2020 10:53:52 -0400 Received: from duva.sjd.se ([178.174.241.105]:49084) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jUAZC-0006GB-Cz for 40979@debbugs.gnu.org; Thu, 30 Apr 2020 10:53:35 -0400 Received: from latte (31-208-42-58.cust.bredband2.com [31.208.42.58]) (authenticated bits=0) by duva.sjd.se (8.15.2/8.15.2/Debian-8) with ESMTPSA id 03UErKvX014478 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <40979@debbugs.gnu.org>; Thu, 30 Apr 2020 14:53:23 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=josefsson.org; s=default; t=1588258403; bh=byIkh/v/ieqilctaFXnX+oyU+EomGwIp8cZ/i6/W52Q=; h=Subject:From:To:Date:In-Reply-To:References:From; b=QCYyPHOBL9Wuk26wvKIq9RvLPqqnRnnp74T9OQzch1m9jpmVDFvrM+NcnZTbZQZse MpZ+763OkjWncu63Wv3JXyIs7wD1nAPq/8+FozD1KrCpg5jvqRn+9PS9EP7K51eYG8 8jLdPgNJIjkn8UaFHclQYBEr3xLxzQnLXuAtsrwTk2HwFj5QiWEvqY8kpJyAaXmrMM QXXh6hiJ+wDYP0Hgxb0mvAcfzwnJYS4qVVTdehNYuvHMCxwNn7eMeCjTl9TstVLAgH 5XRZ6JQCHypo72uFoxvTWHxsu8qP2WYX5sVq63YKWELlr0cxgsiU+UHJmmaDnq+oUn VyyZwv3xxyUxg== Message-ID: <3704d66540297eaa461006cba639c14da5bbf5d5.camel@josefsson.org> Date: Thu, 30 Apr 2020 16:53:20 +0200 In-Reply-To: References: <874kt1fin5.fsf@latte.josefsson.org> Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-dxJr1msg72O3LQpIe0Vm" User-Agent: Evolution 3.30.5-1.1 MIME-Version: 1.0 X-Virus-Scanned: clamav-milter 0.102.2 at duva.sjd.se X-Virus-Status: Clean X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Received-From: 209.51.188.43 X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" Reply-to: Simon Josefsson , Simon Josefsson via Guix-patches From: Simon Josefsson via Guix-patches via X-Scanner: scn0 X-Spam-Score: 0.49 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=josefsson.org header.s=default header.b=QCYyPHOB; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 2001:470:142::17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Scan-Result: default: False [0.49 / 13.00]; HAS_REPLYTO(0.00)[simon@josefsson.org]; RCVD_VIA_SMTP_AUTH(0.00)[]; GENERIC_REPUTATION(0.00)[-0.49417758144022]; MX_INVALID(1.00)[cached]; DWL_DNSWL_FAIL(0.00)[2001:470:142::17:server fail]; R_SPF_ALLOW(-0.20)[+ip6:2001:470:142::/48:c]; IP_REPUTATION_HAM(0.00)[asn: 22989(0.17), country: US(-0.00), ip: 2001:470:142::17(-0.49)]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[]; MIME_BASE64_TEXT_BOGUS(1.00)[]; R_DKIM_REJECT(1.00)[josefsson.org:s=default]; DKIM_TRACE(0.00)[josefsson.org:-]; MIME_BASE64_TEXT(0.10)[]; MAILLIST(-0.20)[mailman]; SIGNED_PGP(-2.00)[]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[31.208.42.58:received]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:+,4:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:22989, ipnet:2001:470:142::/48, country:US]; TAGGED_FROM(0.00)[larch=yhetil.org]; FROM_NEQ_ENVFROM(0.00)[guix-patches@gnu.org,guix-patches-bounces@gnu.org]; ARC_NA(0.00)[]; URIBL_BLOCKED(0.00)[nongnu.org:url,josefsson.org:email]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain,text/x-patch]; REPLYTO_DOM_NEQ_FROM_DOM(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[40979@debbugs.gnu.org]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; DNSWL_BLOCKED(0.00)[2001:470:142::17:from]; DMARC_NA(0.00)[gnu.org]; RCVD_COUNT_SEVEN(0.00)[9]; FORGED_SENDER_MAILLIST(0.00)[] X-TUID: NsmvXrQRF9CV --=-dxJr1msg72O3LQpIe0Vm Content-Type: multipart/mixed; boundary="=-sdqDPV8nfJlwFm80A4y0" --=-sdqDPV8nfJlwFm80A4y0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Sorry there was a typo in the commit log in the last patch. Please use the attached file instead. /Simon --=-sdqDPV8nfJlwFm80A4y0 Content-Disposition: attachment; filename="0001-gnu-libntlm-Update-to-1.6-fixes-CVE-2019-17455.patch" Content-Transfer-Encoding: base64 Content-Type: text/x-patch; name="0001-gnu-libntlm-Update-to-1.6-fixes-CVE-2019-17455.patch"; charset="UTF-8" RnJvbSBlY2FiMDc3OWY2YTRkYmFjNWRlMWY4YTU4N2FmM2M0MGE5M2NmMjk0IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBTaW1vbiBKb3NlZnNzb24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+ CkRhdGU6IFRodSwgMzAgQXByIDIwMjAgMTE6MDI6MDggKzAyMDAKU3ViamVjdDogW1BBVENIXSBn bnU6IGxpYm50bG06IFVwZGF0ZSB0byAxLjYgW2ZpeGVzIENWRS0yMDE5LTE3NDU1XS4KCiogZ251 L3BhY2thZ2VzL2dzYXNsLnNjbSAobGlibnRsbSk6IFVwZGF0ZSB0byAxLjYuCi0tLQogZ251L3Bh Y2thZ2VzL2dzYXNsLnNjbSB8IDQgKystLQogMSBmaWxlIGNoYW5nZWQsIDIgaW5zZXJ0aW9ucygr KSwgMiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9nbnUvcGFja2FnZXMvZ3Nhc2wuc2NtIGIv Z251L3BhY2thZ2VzL2dzYXNsLnNjbQppbmRleCBhNzk2ZjlhYTgyLi45OGFjYzNjNzU2IDEwMDY0 NAotLS0gYS9nbnUvcGFja2FnZXMvZ3Nhc2wuc2NtCisrKyBiL2dudS9wYWNrYWdlcy9nc2FzbC5z Y20KQEAgLTM1LDE0ICszNSwxNCBAQAogKGRlZmluZS1wdWJsaWMgbGlibnRsbQogICAocGFja2Fn ZQogICAgIChuYW1lICJsaWJudGxtIikKLSAgICAodmVyc2lvbiAiMS41IikKKyAgICAodmVyc2lv biAiMS42IikKICAgICAoc291cmNlIChvcmlnaW4KICAgICAgICAgICAgICAgKG1ldGhvZCB1cmwt ZmV0Y2gpCiAgICAgICAgICAgICAgICh1cmkgKHN0cmluZy1hcHBlbmQgImh0dHBzOi8vd3d3Lm5v bmdudS5vcmcvbGlibnRsbS9yZWxlYXNlcy8iCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgImxpYm50bG0tIiB2ZXJzaW9uICIudGFyLmd6IikpCiAgICAgICAgICAgICAgIChzaGEy NTYKICAgICAgICAgICAgICAgIChiYXNlMzIKLSAgICAgICAgICAgICAgICAiMWdjdnY3ZjlyZ2dw eGF5ODFxdjZrdzVocjZnZDRxaXl6a2J3aHp6MDJmeDlqdnY5a21zayIpKSkpCisgICAgICAgICAg ICAgICAgIjA4YjgzbnNzMTZqc24yMTNqMzI2eWhuMXZucnoxMGsxNWZ3cTZqbTViMXZkbjIzbm5k emoiKSkpKQogICAgIChidWlsZC1zeXN0ZW0gZ251LWJ1aWxkLXN5c3RlbSkKICAgICAoc3lub3Bz aXMgIkxpYnJhcnkgdGhhdCBpbXBsZW1lbnRzIE5UTE0gYXV0aGVudGljYXRpb24iKQogICAgIChk ZXNjcmlwdGlvbgotLSAKMi4yMC4xCgo= --=-sdqDPV8nfJlwFm80A4y0-- --=-dxJr1msg72O3LQpIe0Vm Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQSjzJyHC50xCrrUzy9RcisI/kdFogUCXqrmYAAKCRBRcisI/kdF onh1AP9RO3FfkHcOv87LbgNMezS69XhOr+eKIsIG5HtS9ZZSNAD9FzcdTm6zLyTk 2reXi7fB0JobdRSE/GSGoUmC6CRMigo= =MMMs -----END PGP SIGNATURE----- --=-dxJr1msg72O3LQpIe0Vm--