From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id mOYvJMYhUl+tbAAA0tVLHw (envelope-from ) for ; Fri, 04 Sep 2020 11:15:18 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id sFo0IMYhUl+8bQAAbx9fmQ (envelope-from ) for ; Fri, 04 Sep 2020 11:15:18 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B5D4E94051F for ; Fri, 4 Sep 2020 11:15:17 +0000 (UTC) Received: from localhost ([::1]:43580 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kE9ga-0007YE-59 for larch@yhetil.org; Fri, 04 Sep 2020 07:15:16 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37214) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kE9gN-0007XN-4z for guix-patches@gnu.org; Fri, 04 Sep 2020 07:15:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:54278) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kE9gM-0001id-RV for guix-patches@gnu.org; Fri, 04 Sep 2020 07:15:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kE9gM-0003se-NE for guix-patches@gnu.org; Fri, 04 Sep 2020 07:15:02 -0400 Subject: bug#42890: [PATCH] gnu: taglib: Include patch to prevent OGG corruption. Resent-From: Pierre Langlois Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Fri, 04 Sep 2020 11:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 42890 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: Pierre Langlois , 42890-done@debbugs.gnu.org, mail@brendan.scot Mail-Followup-To: 42890@debbugs.gnu.org, pierre.langlois@gmx.com, pierre.langlois@gmx.com Received: via spool by 42890-done@debbugs.gnu.org id=D42890.159921807314842 (code D ref 42890); Fri, 04 Sep 2020 11:15:02 +0000 Received: (at 42890-done) by debbugs.gnu.org; 4 Sep 2020 11:14:33 +0000 Received: from localhost ([127.0.0.1]:37589 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kE9fs-0003rJ-Nf for submit@debbugs.gnu.org; Fri, 04 Sep 2020 07:14:32 -0400 Received: from mout.gmx.net ([212.227.17.20]:54595) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kE9fq-0003qx-Gr for 42890-done@debbugs.gnu.org; Fri, 04 Sep 2020 07:14:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1599218063; bh=VShMe9Vh7iot5UG+haY+8MW2Kwv0Y8GBkWNEtNqPv4E=; h=X-UI-Sender-Class:References:From:To:Cc:Subject:In-reply-to:Date; b=H5P1vzTGBhE3i0bNQPTRRL3/NlgquPGefZwVWHLda/a0+8ZYhDGianMRQium8SWdz RBwletM9hg/u42hY0nMDA3KvB1em4f05b26OuucWDNbhzV+CTqIJmR6UBLUFocryO3 JjlI7US44YyWz7lH3wJLreK2dgtW9rEK9g4P5nI8= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from labiere ([82.69.64.142]) by mail.gmx.com (mrgmx105 [212.227.17.174]) with ESMTPSA (Nemesis) id 1N3bSt-1keS202v8V-010cwQ; Fri, 04 Sep 2020 13:14:23 +0200 References: <87r1s6oam4.fsf@gmx.com> <98bfcbfa-4142-2985-864f-c146ac8d1f92@brendan.scot> <87blj82tt6.fsf@gmx.com> <87pn7ndee3.fsf@gmx.com> <874kodvqee.fsf@gnu.org> User-agent: mu4e 1.4.13; emacs 27.1 From: Pierre Langlois In-reply-to: <874kodvqee.fsf@gnu.org> Date: Fri, 04 Sep 2020 12:14:26 +0100 Message-ID: <878sdpu73h.fsf@gmx.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Provags-ID: V03:K1:yJ95YTQGQyeGulRkLm4NGWHbjQ7VUuuC4m2Pg/XTgAy2/054cVL KzPazIcpg/tE0smIDJZasMLx6N6jEnonCGhwH9U+McYJuAiKXxw55AraG/uYEmFIoLXAo3s VaWDzdH6VJMLrBfKQkJA4BdpjhDI9u7Rt6xDi7mAveLya9679Df0aE3JaL8Etec6Qmtck7Y 0bfzZIFpU/+wNZSzyrxgw== X-UI-Out-Filterresults: notjunk:1;V03:K0:QTNGR6Ypowo=:t/WPI4K3uEaGgDY9HM/LZn O1BKM2f8glzbTGljnb1Y2i+RzqsdxAI0EbLemwyyTuSHFRM+9Yh+eLqN/FRwO7B5ErwK8CHEy D5W6PS7lUtK+imY8cEYEA/lZw4qs6IKdKQdD7TyO2g0pgOxdDjshaiRdaJS2ef/8Y60m7s+96 HTHN6BZ/JMSfaFUiRnxJPBf/rj5aeKJJOupZZQkwEG51uKA4+gvbyVn5Fos/X8zdHifdlGpYK D8xOd5MRUJLKvzUjLpIrSUXw9/ac7qzhHK/p7Xgu/dq/49+1r2QslysEPDFlEHbxggz2jZz1o NtgRSujdZAIXnUA3ej4OQI9h+LTCRns1Pmxi+U4bjTw8vCHgsdAwUvzg21ZzT4wPPuXJbKEG/ X9wedj/ywFQI2iz/wGPBnrTUTIe40JRXBnrfeu0Bw1t+eKpRAKyVDpqXulwqdu143W1QFQJtT ZuMdp1FYnYnRmQIZEI+YXVse9J33GOwHDFO1i5aJ7yUM30DSO5CAapVTGQQI7XIbcZbtJNNu1 Q8M8vX53Tzs0lRXHl1t4iTch/WNcgupjTzaIcYaPfDm2StrJunaSolRm9tQ5zlYlr0YpLArSD FwHbqqI9HBFypGXEADuET8yiOyJ7rm+GXGJl8sV5hgd51HfIfLQL1sBgCWZa8E2xsQ/1kVEn6 CL5iTV6WKa6G21UukewBkFqaQrvAq6QJX8fL+LYwBoWhisLKVTCyGLqZUWMlhCczuLf8ivrza CbYCmddLFOHlG5fUu4vJB/YuMHALcpqUzRdjmzie0k1go+Z/CVA7dorIFtcbwY7rBi4C4vr3T yG5qwEy+/ShBX6MFKpIEjV1Yu79+O7ghyFY5y0maNMzETgoXS3TIR9AW1cqLV/JwA+5J0W/bQ oSf3Ik1FdyPFC3A7JYc+B08Xyd0mSyjqaHycWGdVEp2uDya6kA26e8TdXmLFd/sEE5VkPNM4A 1grftR4OQMGGpdARa4qr8aJe2X41XnomUiQDFdp1rn3sRusPH3uCjZ8CxL1n1N2EE8Kc/ToFI JPlqouB9cOJprSmJdcd5e1xrl+v/edV87GZxFcWMgpjuv+lKcugpl2xr4SU0gUVc3aq1xTx14 IQsyom91Dq+NnlrdTiA8sONrlC6ffMKVnboVjiGhFyQCnBsrphvs6MIgdaz0Si/7z0zS224hf qgIYx0R/ly9KhFzodNh/ZtMK3PG6OXsuYasY3bSBYTs0aovgHGYgf4oF7P+4Xj3wNQFutokLa UckfY4ny32bi0h0STu4WgzKW6UjfsfOtXSzGfJA== X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.7 (-) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=gmx.net header.s=badeba3b8450 header.b=H5P1vzTG; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: -2.11 X-TUID: FV1csUCuBOmG --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s writes: > Hi! > > Pierre Langlois skribis: > >>>>From 97a5d71bd50c72d2d7562a7d22baca04f4987657 Mon Sep 17 00:00:00 2001 >> From: Pierre Langlois >> Date: Tue, 18 Aug 2020 18:38:01 +0100 >> Subject: [PATCH] gnu: taglib: Update to 1.12-beta-1. >> >> This switches to a yet unreleased version of taglib, to make sure long >> standings issues and CVEs are covered until a proper release is made ups= tream. >> >> Among these, we have: >> >> - CVE-2017-12678 >> - CVE-2018-11439 >> - https://github.com/taglib/taglib/issues/864 >> >> * gnu/packges/mp3.scm (taglib): Update to 1.12-beta-1. >> [source]: Switch to using git-fetch. > > It=E2=80=99s a good idea to add =E2=80=9C[security fixes]=E2=80=9D or to = list CVEs in the > subject line of the commit log. > > Otherwise LGTM! > > You can now use your new super commit powers to push it. :-) Whoohoo! done :-) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEctU9gYy29KFyWDdMqPyeRH9PfVQFAl9SIZMACgkQqPyeRH9P fVRrtAf/VkNLsQ1bMSMJaCeX+9EKSfNwwh/ZERUeHeMp71y2OrX3DJNZ3VhWlHRB VqEZe4j6UocrhwEJlfwrzBgGXOucmd16rVJNE0niUmP9/SI8VhpNtxyjYtWHJNTh 6OMuYppikllu3Gk7yPDHc12qjLKKch3abTpdo67yT6ft4MXcNeFVSb4p89NEta4y nowGGkM+czoxwFVf6DolAdZkD513a9pqVA2XOWPEo7uHb2RWCBBLEw7jGPhy3GM+ SoWuIBkxwycJJodnbTiIec6C82Z/ezyhPGg0gJpGBXsS8nWqSUBy25uYC7zRjDkj WRTDq71UN3fr4JjKkn0UsPfjobfNFg== =FO5s -----END PGP SIGNATURE----- --=-=-=--