unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
From: ludo@gnu.org (Ludovic Courtès)
To: Leo Famulari <leo@famulari.name>
Cc: 30180-done@debbugs.gnu.org
Subject: [bug#30180] [PATCH] gnu: libsndfile: Fix CVE-2017-12562.
Date: Wed, 24 Jan 2018 14:59:18 +0100	[thread overview]
Message-ID: <87h8rb2w95.fsf@gnu.org> (raw)
In-Reply-To: <20180123202552.GC6750@jasmine.lan> (Leo Famulari's message of "Tue, 23 Jan 2018 15:25:52 -0500")

Leo Famulari <leo@famulari.name> skribis:

> On Tue, Jan 23, 2018 at 10:20:26AM +0100, Ludovic Courtès wrote:
>> Leo Famulari <leo@famulari.name> skribis:
>> 
>> > I'd like to ungraft this on core-updates, even though it's late in the
>> > core-updates cycle. Changing libsndfile requires only ~600 rebuilds per
>> > architecture.
>> >
>> > * gnu/packages/patches/libsndfile-CVE-2017-12562.patch: New file.
>> > * gnu/local.mk (dist_patch_DATA): Add it.
>> > * gnu/packages/pulseaudio.scm (libsndfile)[replacement]: New field.
>> > (libsndfile/fixed): New variable.
>> 
>> The patch LGTM!
>
> Okay, pushed!
>
>> As for ungrafting, I’ll let you judge.  I would really like to merge
>> that branch soon, but I haven’t checked in status over the last couple
>> of days.
>
> The branch is very close to done if you just look at the numbers, but
> there are still some important package failures. But there will be more
> grafts soon enough, so I guess we might as well leave it grafted.

Sounds reasonable.

Ludo’.

      reply	other threads:[~2018-01-24 14:00 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-01-20  2:07 [bug#30180] [PATCH] gnu: libsndfile: Fix CVE-2017-12562 Leo Famulari
2018-01-23  9:20 ` Ludovic Courtès
2018-01-23 20:25   ` bug#30180: " Leo Famulari
2018-01-24 13:59     ` Ludovic Courtès [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87h8rb2w95.fsf@gnu.org \
    --to=ludo@gnu.org \
    --cc=30180-done@debbugs.gnu.org \
    --cc=leo@famulari.name \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).