From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id GGBrHL/qDGNYaAEAbAwnHQ (envelope-from ) for ; Mon, 29 Aug 2022 18:35:11 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id WJQvG7/qDGMkfQAAG6o9tA (envelope-from ) for ; Mon, 29 Aug 2022 18:35:11 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 1FF8220EE8 for ; Mon, 29 Aug 2022 18:35:11 +0200 (CEST) Received: from localhost ([::1]:57626 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oShjB-0007Qp-Pn for larch@yhetil.org; Mon, 29 Aug 2022 12:35:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:35506) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oShi7-0007QC-2d for guix-patches@gnu.org; Mon, 29 Aug 2022 12:34:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:43948) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oShi6-0004ZW-MK for guix-patches@gnu.org; Mon, 29 Aug 2022 12:34:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1oShi6-0007rp-HB for guix-patches@gnu.org; Mon, 29 Aug 2022 12:34:02 -0400 Subject: bug#57354: [PATCH 1/2] gnu: rust-regex-syntax: Update to 0.6.27. Resent-From: Marius Bakke Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Mon, 29 Aug 2022 16:34:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 57354 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: gyara via Guix-patches via , 57354-done@debbugs.gnu.org Cc: gyara Mail-Followup-To: 57354@debbugs.gnu.org, marius@gnu.org, me@gyara.moe Received: via spool by 57354-done@debbugs.gnu.org id=D57354.166179083730219 (code D ref 57354); Mon, 29 Aug 2022 16:34:02 +0000 Received: (at 57354-done) by debbugs.gnu.org; 29 Aug 2022 16:33:57 +0000 Received: from localhost ([127.0.0.1]:33695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oShi0-0007rL-Rk for submit@debbugs.gnu.org; Mon, 29 Aug 2022 12:33:57 -0400 Received: from eggs.gnu.org ([209.51.188.92]:37548) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oShhy-0007qu-4E for 57354-done@debbugs.gnu.org; Mon, 29 Aug 2022 12:33:54 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:58992) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oShhr-0004X7-MX; Mon, 29 Aug 2022 12:33:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=LbhX8tgNeVLhOcrbms9jMNFKfbKZnZXq2ncUh+G3WsU=; b=lrZ8BaajWZDRKtTI2zAF hkr2I60gV7jCvJObWYhM0a0tU0Fzphfhwx1vbIt9lkeccWmwk19I2mWvqKwwI343JoOmlE9Q3sKYF R0e0avtuXYY0zOo9Jgq+mDFNDSFZXgVyNnpOfttzcWz69z8N2GrvO3YdbYtHlA+wM8JSEHgkNVXVu M5YRidKQi0f4kN7SebI70grSPVlyMzSqJjcuGbNUEGWNzJdQnnt2ywKazsjA23hEeLWlyXLgHS4h5 wWP4RGvxUcYz4GauErqSYFqZfNFbFyYFI7+TpVVgbltnzitaopcSnCHjb8KoxO7V8pQTlhmgMhZ71 RKC/M4mIf7MeOg==; Received: from [84.214.173.6] (port=54498 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oShhr-00051b-8t; Mon, 29 Aug 2022 12:33:47 -0400 From: Marius Bakke In-Reply-To: <20220823143020.471916-1-me@gyara.moe> References: <20220823143020.471916-1-me@gyara.moe> Date: Mon, 29 Aug 2022 18:33:43 +0200 Message-ID: <87mtbnc8m0.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1661790911; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=LbhX8tgNeVLhOcrbms9jMNFKfbKZnZXq2ncUh+G3WsU=; b=NPXQKl+SviXSQDfFSOyBiqRek7cNx3OgHsUnyT97J2h0cdnSrXPi5hGpyWHRGXAo2msmIz ptag1atrHjQqOATR0vwxU8jMaKMINakgl3ocqH14+/XccICTKIIFuE8oMBP23rgMv1dyhh hUwWkorYWz+v0uVA7Ed1IyfjDXOigd1gQEnWpkXNimMFba/ApBhubKYlNM46qEhy+Qs4+P FOx6ip1xEhdx9MyBG+7toRNjBFRXBhEql6QzWBSUill63bAWHcQNXNr0QKOaSJP+EzzObv T6gSE9HD5FFbmEV+mh7XJP/SOMx+2UCOtNZzz9PwLiTO0u7S8AuqaPeanjyQ3w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1661790911; a=rsa-sha256; cv=none; b=JqeO9qAaAUg5hbOx+UORsSbwBgTUwGI6Egd8SLJ60zvE1/2j4Eoqg33x/fDaTfYrXLRtjT 3juPod4lMbAMoVwG6ouk5Du18BMV52Q7y8t7B/BOlxbjx13o6orLvnRe5DhJ2UqxH7FvFS 6g9EbBFF/SzLDNXAeFhIa79LloiFGwsWDZGMSwLon3ZYDu3z0QHcNEp5ZuFSSNF4AHfUmD vJYzwk0wz4dNmXc3l38Y1qFMmKqhb/clxjD2JOpr/LPXlfecIJPS7lJbIQbDwKg5MY+xad w8HgjPDP5OPDiiq+MgbMDWUYXxtQDjoSdAC9UEaotxEfy5U4Hy9pIQdi0NAtLQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gnu.org header.s=fencepost-gnu-org header.b=lrZ8Baaj; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -6.10 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gnu.org header.s=fencepost-gnu-org header.b=lrZ8Baaj; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 1FF8220EE8 X-Spam-Score: -6.10 X-Migadu-Scanner: scn0.migadu.com X-TUID: 638YH+2ozrpA --=-=-= Content-Type: text/plain Hi gyara, Thanks a lot for this security fix. Since this will rebuild 'librsvg', which has ~550 dependent packages, I added these patches to the about-to-be-merged 'staging' branch. (it's not ideal either, since it is supposed to be "frozen"; but we cannot graft Rust packages and would instead have to add a graft for a patched librsvg, which seemed a lot of work for 'just' 550 rebuilds) PS: In the future, please mention the changed variable in the commit message (see the commit log for examples). I did that on your behalf. Pushed in: 1063d918b9 gnu: rust-regex-syntax: Update to 0.6.27. 1cf3737093 gnu: rust-regex: Update to 1.6.0 [fixes CVE-2022-24713]. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIUEARYKAC0WIQRNTknu3zbaMQ2ddzTocYulkRQQdwUCYwzqZw8cbWFyaXVzQGdu dS5vcmcACgkQ6HGLpZEUEHcgcgD/fZYNydmpeRKulty5vK/Sa/kRj7KXyEnU4Wwz nXvfAfIBAOjHICEuJ5OJm3oa3v/DkfOGN67EZHuInWYWPprk20QB =WOz9 -----END PGP SIGNATURE----- --=-=-=--