From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:33348)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fuco6-0005H7-05
	for guix-patches@gnu.org; Tue, 28 Aug 2018 08:09:19 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fucm0-000816-DJ
	for guix-patches@gnu.org; Tue, 28 Aug 2018 08:07:09 -0400
Received: from debbugs.gnu.org ([208.118.235.43]:58172)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1fucly-000807-DW
	for guix-patches@gnu.org; Tue, 28 Aug 2018 08:07:03 -0400
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fucly-00065r-7Z
	for guix-patches@gnu.org; Tue, 28 Aug 2018 08:07:02 -0400
Subject: [bug#32545] [PATCH] gnu: dropbear: Fix CVE-2018-15599.
Resent-Message-ID: <handler.32545.B32545.153545799723386@debbugs.gnu.org>
From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=)
References: <524f9e5c18a1ef1e5d86b05510da177cf1d530f1.1535401642.git.leo@famulari.name>
Date: Tue, 28 Aug 2018 14:06:19 +0200
In-Reply-To: <524f9e5c18a1ef1e5d86b05510da177cf1d530f1.1535401642.git.leo@famulari.name>
	(Leo Famulari's message of "Mon, 27 Aug 2018 16:27:28 -0400")
Message-ID: <87r2iilmpw.fsf@gnu.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-patches/>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org
Sender: "Guix-patches" <guix-patches-bounces+kyle=kyleam.com@gnu.org>
To: Leo Famulari <leo@famulari.name>
Cc: 32545@debbugs.gnu.org

Hi!

Leo Famulari <leo@famulari.name> skribis:

> Dropbear users, please test!
>
> * gnu/packages/patches/dropbear-CVE-2018-15599.patch: New file.
> * gnu/local.mk (dist_patch_DATA): Add it.
> * gnu/packages/ssh.scm (dropbear)[source]: Use it.

I haven=E2=80=99t tested it but the patch LGTM, FWIW.  You can also run =E2=
=80=9Cmake
check-system TESTS=3Ddropbear=E2=80=9D if you haven=E2=80=99t already, to m=
ake sure the
basics work.

Thanks,
Ludo=E2=80=99.