* [bug#30828] Icedtea updates @ 2018-03-15 18:34 Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes] Leo Famulari ` (2 more replies) 0 siblings, 3 replies; 8+ messages in thread From: Leo Famulari @ 2018-03-15 18:34 UTC (permalink / raw) To: 30828; +Cc: Ricardo Wurmus, Gábor Boskovits [-- Attachment #1: Type: text/plain, Size: 222 bytes --] These patches update Icedtea 2 and 3 (Java 7 and 8, respectively). Usually I push these without review after making sure they build, but I noticed a lot of Java-related activity lately, so I'm sending them in for review. [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 833 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
* [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes]. 2018-03-15 18:34 [bug#30828] Icedtea updates Leo Famulari @ 2018-03-15 18:36 ` Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 2/2] gnu: icedtea@3: Update to 3.7.0 " Leo Famulari 2018-03-15 19:25 ` [bug#30828] Icedtea updates Gábor Boskovits 2018-03-16 14:11 ` Marius Bakke 2 siblings, 1 reply; 8+ messages in thread From: Leo Famulari @ 2018-03-15 18:36 UTC (permalink / raw) To: 30828 Fixes CVE-2018-{2579,2588,2599,2602,2603,2618,2629,2633,2634,2637,2641,2663, 2677,2678}. * gnu/packages/java.scm (icedtea-7): Update to 2.6.13. --- gnu/packages/java.scm | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm index 521293da4..6782eaf5e 100644 --- a/gnu/packages/java.scm +++ b/gnu/packages/java.scm @@ -1074,7 +1074,7 @@ bootstrapping purposes.") (license license:gpl2+))) (define-public icedtea-7 - (let* ((version "2.6.12") + (let* ((version "2.6.13") (drop (lambda (name hash) (origin (method url-fetch) @@ -1092,7 +1092,7 @@ bootstrapping purposes.") version ".tar.xz")) (sha256 (base32 - "0s0zh0mj1sab99kb516lsgq3859vsc951phc565gwix4l5g9zppk")) + "1w331rdqx1dcx2xb0fmjmrkdc71xqn20fxsgw8by4xhiblh88khh")) (modules '((guix build utils))) (snippet '(substitute* "Makefile.in" @@ -1502,25 +1502,25 @@ bootstrapping purposes.") (native-inputs `(("openjdk-src" ,(drop "openjdk" - "15qf3nfidgnigh2zny6djfp8bhfwjnwk9i06mxs2jbq6na953ql2")) + "0l34ikyf62hbzlf9032alzkkqvf7bpmckz4gvirvph755w7gka8l")) ("corba-drop" ,(drop "corba" - "1phvn8fyl5mw2n2sn97f17nm442k75xsz2023bfw4h66ywzkqhqy")) + "050gv2jbg1pi6qkn8w18bwpbklfa5b0kymjvan9pncddbj8m84fz")) ("jaxp-drop" ,(drop "jaxp" - "0j4ms6lmnfa2cwfh9yfqdfg1bnn3fc40ay4x6k8zqa8yvspik5w5")) + "1k6yldwnxfzdg5926r1nlfv8d1r1j7rlp2nkz6gqh05vgyamnfhl")) ("jaxws-drop" ,(drop "jaxws" - "09sddj73k7n29s39hvdk14r130mvlknbxkpd2w58f34sq5sgpdrg")) + "110j7jlz47x2gg6f7653x12mssan5kvj9l9h1m1c8c92drfxbqyk")) ("jdk-drop" ,(drop "jdk" - "0q896zz8wyswmksy225q1k27nz3v3l27052dcvvpv20ryykz8yp7")) + "0d1mca38ksxvdskp9im3pp7fdijhj1n3lwq9w13r9s4v3qyskgdd")) ("langtools-drop" ,(drop "langtools" - "0niicyfccim4a9is4akh87jd7wbl8jrazdaab957mcv9l1x3bnqc")) + "0nq5236fzxn3p6x8cgncl56mzcmsj07q9gymysnws4c8byc6n0qj")) ("hotspot-drop" ,(drop "hotspot" - "1jw42qhbm3wfavk39304m53lmqipcllrvjqiab2f42mjs10i8gfx")) + "17bdv39n4lh8l5737c96f3xgamx4y305m067p01cywgp7zaddqws")) ("ant" ,ant-bootstrap) ("attr" ,attr) ("coreutils" ,coreutils) -- 2.16.2 ^ permalink raw reply related [flat|nested] 8+ messages in thread
* [bug#30828] [PATCH 2/2] gnu: icedtea@3: Update to 3.7.0 [security fixes]. 2018-03-15 18:36 ` [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes] Leo Famulari @ 2018-03-15 18:36 ` Leo Famulari 2018-03-15 19:20 ` Leo Famulari 0 siblings, 1 reply; 8+ messages in thread From: Leo Famulari @ 2018-03-15 18:36 UTC (permalink / raw) To: 30828 Fixes CVE-2018-{2579,2582,2588,2599,2602,2603,2618,2629,2633,2634,2637,2641, 2663,2677,2678}. * gnu/packages/java.scm (icedtea-7): Update to 3.7.0. --- gnu/packages/java.scm | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/gnu/packages/java.scm b/gnu/packages/java.scm index 6782eaf5e..fbb0affe3 100644 --- a/gnu/packages/java.scm +++ b/gnu/packages/java.scm @@ -1570,7 +1570,7 @@ IcedTea build harness.") (license license:gpl2+)))) (define-public icedtea-8 - (let* ((version "3.6.0") + (let* ((version "3.7.0") (drop (lambda (name hash) (origin (method url-fetch) @@ -1579,7 +1579,7 @@ IcedTea build harness.") "/icedtea8/" version "/" name ".tar.xz")) (sha256 (base32 hash)))))) (package (inherit icedtea-7) - (version "3.6.0") + (version version) (source (origin (method url-fetch) (uri (string-append @@ -1587,7 +1587,7 @@ IcedTea build harness.") version ".tar.xz")) (sha256 (base32 - "0zj192zrrxqh6j1ywc3399gk2ycay9w8pvzcvvr2kvdkb37ak86h")) + "09yqzn8rpccs7cyv89hhy5zlznpgqw5x3jz0w1ccp0cz1vgs8l5w")) (modules '((guix build utils))) (snippet '(begin @@ -1689,34 +1689,34 @@ new Date();")) `(("jdk" ,icedtea-7 "jdk") ("openjdk-src" ,(drop "openjdk" - "0mqxh81kq05z4wydkik0yrr81ibf84xmwsdcw9n2gfrzs4f5jxnb")) + "1mj6xgmw31i6qd30qi9dmv7160fbcfq5ikz1jwjihdg2793il19p")) ("aarch32-drop" ,(drop "aarch32" - "0b207g2n6kn510zf5vwh58bsxgqrmkvrna4p20r74v9cwcwx83n2")) + "1wb8k5zm40zld0986dvmlh5xh3gyixbg9h26sl662zy92amhmyyg")) ("corba-drop" ,(drop "corba" - "0qinc1q4w01nkr9klhfyd8caxvyrrfxjrz32nd7kgyja2bj8x7dd")) + "11ma4zz0599cy70xd219v7a8vin7p96xrhhz3wsaw6cjhkzpagah")) ("jaxp-drop" ,(drop "jaxp" - "07azrp3g86vk2laybmr5xfn0yrljkxs0rlm1q48385br225bgdxi")) + "14m1y0z0fbm5z5zjw3vnq85py8dma84bi3f9cw8rhdyc6skk8q4i")) ("jaxws-drop" ,(drop "jaxws" - "018fd2hq57zp3pq06wlxy5pabqcyk36xi8hk0d6xk3a90wsjvyik")) + "09andnm6xaasnp963hgx42yiflifiljp9z7z85jrfyc5z8a5whmf")) ("jdk-drop" ,(drop "jdk" - "0vs488kq5j2cc6kplc78jbhfxwq4fn06l34xrbq4d6y17777arg8")) + "0s6lcpc0zckz2fnq98aqf28nz9y3wbi41a3kyaqqa2abwbkm1zwl")) ("langtools-drop" ,(drop "langtools" - "04f6d1wvck5jrpvrcw5gsbzxnihcry9zrf1v85czdm959q21zv9c")) + "15wizy123vhk40chl1b4p552jf2pw2hdww0myf11qab425axz4nw")) ("hotspot-drop" ,(drop "hotspot" - "1mfgpzyr6zzy9klf8nn3z6d41fydb9ghpfpqzjq3cl95axfbdl1g")) + "1ciz1w9j0kz7s1dxdhyqq71nla9icyz6qvn0b9z2zgkklqa98qmm")) ("nashorn-drop" ,(drop "nashorn" - "1a26cmzbs50gkh4rmmmxls7zljx62vfp1wq02gsfd5jqs4xvlibj")) + "19pzl3ppaw8j6r5cnyp8qiw3hxijh3hdc46l39g5yfhdl4pr4hpa")) ("shenandoah-drop" ,(drop "shenandoah" - "11hmn9mwmvryfddcanzx3qffjm8bbiv18nwv3iy9cswrvxjy010f")) + "0k33anxdzw1icn072wynfmmdjhsv50hay0j1sfkfxny12rb3vgdy")) ,@(fold alist-delete (package-native-inputs icedtea-7) '("jdk" "openjdk-src" "corba-drop" "jaxp-drop" "jaxws-drop" "jdk-drop" "langtools-drop" "hotspot-drop"))))))) -- 2.16.2 ^ permalink raw reply related [flat|nested] 8+ messages in thread
* [bug#30828] [PATCH 2/2] gnu: icedtea@3: Update to 3.7.0 [security fixes]. 2018-03-15 18:36 ` [bug#30828] [PATCH 2/2] gnu: icedtea@3: Update to 3.7.0 " Leo Famulari @ 2018-03-15 19:20 ` Leo Famulari 0 siblings, 0 replies; 8+ messages in thread From: Leo Famulari @ 2018-03-15 19:20 UTC (permalink / raw) To: 30828 [-- Attachment #1: Type: text/plain, Size: 662 bytes --] On Thu, Mar 15, 2018 at 02:36:51PM -0400, Leo Famulari wrote: > (define-public icedtea-8 > - (let* ((version "3.6.0") > + (let* ((version "3.7.0") > (drop (lambda (name hash) > (origin > (method url-fetch) > @@ -1579,7 +1579,7 @@ IcedTea build harness.") > "/icedtea8/" version "/" name ".tar.xz")) > (sha256 (base32 hash)))))) > (package (inherit icedtea-7) > - (version "3.6.0") > + (version version) I remembered why this variable is declared twice for icedtea-8: it otherwise inherits the version of icedtea-7 here. So, I've fixed this locally. [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 833 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
* [bug#30828] Icedtea updates 2018-03-15 18:34 [bug#30828] Icedtea updates Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes] Leo Famulari @ 2018-03-15 19:25 ` Gábor Boskovits 2018-03-16 14:11 ` Marius Bakke 2 siblings, 0 replies; 8+ messages in thread From: Gábor Boskovits @ 2018-03-15 19:25 UTC (permalink / raw) To: Leo Famulari; +Cc: rekado, 30828 [-- Attachment #1: Type: text/plain, Size: 367 bytes --] 2018. márc. 15. 19:35 ezt írta ("Leo Famulari" <leo@famulari.name>): These patches update Icedtea 2 and 3 (Java 7 and 8, respectively). Usually I push these without review after making sure they build, but I noticed a lot of Java-related activity lately, so I'm sending them in for review. I'm on a vacation now, I can have a look only early next week. [-- Attachment #2: Type: text/html, Size: 673 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
* [bug#30828] Icedtea updates 2018-03-15 18:34 [bug#30828] Icedtea updates Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes] Leo Famulari 2018-03-15 19:25 ` [bug#30828] Icedtea updates Gábor Boskovits @ 2018-03-16 14:11 ` Marius Bakke 2018-03-16 14:56 ` bug#30828: " Leo Famulari 2 siblings, 1 reply; 8+ messages in thread From: Marius Bakke @ 2018-03-16 14:11 UTC (permalink / raw) To: Leo Famulari, 30828; +Cc: Ricardo Wurmus, Gábor Boskovits [-- Attachment #1: Type: text/plain, Size: 409 bytes --] Leo Famulari <leo@famulari.name> writes: > These patches update Icedtea 2 and 3 (Java 7 and 8, respectively). > > Usually I push these without review after making sure they build, but I > noticed a lot of Java-related activity lately, so I'm sending them in > for review. LGTM. I think as long as you've verified that some of the dependents build, it should be safe to push such simple updates regardless. [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 487 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
* bug#30828: Icedtea updates 2018-03-16 14:11 ` Marius Bakke @ 2018-03-16 14:56 ` Leo Famulari 2018-03-16 15:42 ` [bug#30828] " Gábor Boskovits 0 siblings, 1 reply; 8+ messages in thread From: Leo Famulari @ 2018-03-16 14:56 UTC (permalink / raw) To: Marius Bakke; +Cc: Ricardo Wurmus, Gábor Boskovits, 30828-done [-- Attachment #1: Type: text/plain, Size: 564 bytes --] On Fri, Mar 16, 2018 at 03:11:31PM +0100, Marius Bakke wrote: > Leo Famulari <leo@famulari.name> writes: > > > These patches update Icedtea 2 and 3 (Java 7 and 8, respectively). > > > > Usually I push these without review after making sure they build, but I > > noticed a lot of Java-related activity lately, so I'm sending them in > > for review. > > LGTM. I think as long as you've verified that some of the dependents > build, it should be safe to push such simple updates regardless. Alright :) Pushed 1d97d8ffd8531696b1a651419aa9e106b09bb615 [-- Attachment #2: signature.asc --] [-- Type: application/pgp-signature, Size: 833 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
* [bug#30828] Icedtea updates 2018-03-16 14:56 ` bug#30828: " Leo Famulari @ 2018-03-16 15:42 ` Gábor Boskovits 0 siblings, 0 replies; 8+ messages in thread From: Gábor Boskovits @ 2018-03-16 15:42 UTC (permalink / raw) To: Leo Famulari; +Cc: Ricardo Wurmus, 30828-done [-- Attachment #1: Type: text/plain, Size: 687 bytes --] Thanks! Leo Famulari <leo@famulari.name> ezt írta (időpont: 2018. márc. 16., P 15:56): > On Fri, Mar 16, 2018 at 03:11:31PM +0100, Marius Bakke wrote: > > Leo Famulari <leo@famulari.name> writes: > > > > > These patches update Icedtea 2 and 3 (Java 7 and 8, respectively). > > > > > > Usually I push these without review after making sure they build, but I > > > noticed a lot of Java-related activity lately, so I'm sending them in > > > for review. > > > > LGTM. I think as long as you've verified that some of the dependents > > build, it should be safe to push such simple updates regardless. > > Alright :) Pushed 1d97d8ffd8531696b1a651419aa9e106b09bb615 > [-- Attachment #2: Type: text/html, Size: 1080 bytes --] ^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2018-03-16 15:44 UTC | newest] Thread overview: 8+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2018-03-15 18:34 [bug#30828] Icedtea updates Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 1/2] gnu: icedtea@2: Update to 2.6.13 [security fixes] Leo Famulari 2018-03-15 18:36 ` [bug#30828] [PATCH 2/2] gnu: icedtea@3: Update to 3.7.0 " Leo Famulari 2018-03-15 19:20 ` Leo Famulari 2018-03-15 19:25 ` [bug#30828] Icedtea updates Gábor Boskovits 2018-03-16 14:11 ` Marius Bakke 2018-03-16 14:56 ` bug#30828: " Leo Famulari 2018-03-16 15:42 ` [bug#30828] " Gábor Boskovits
Code repositories for project(s) associated with this public inbox https://git.savannah.gnu.org/cgit/guix.git This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).