From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:36272)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fUJCt-0004xh-GX
	for guix-patches@gnu.org; Sat, 16 Jun 2018 17:58:04 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fUJCs-0007pR-P7
	for guix-patches@gnu.org; Sat, 16 Jun 2018 17:58:03 -0400
Received: from debbugs.gnu.org ([208.118.235.43]:44296)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
	id 1fUJCs-0007pL-LU
	for guix-patches@gnu.org; Sat, 16 Jun 2018 17:58:02 -0400
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1fUJCs-0005C0-EL
	for guix-patches@gnu.org; Sat, 16 Jun 2018 17:58:02 -0400
Subject: bug#31487: [PATCH] gnu: upx: Fix CVE-2017-15056.
Resent-To: guix-patches@gnu.org
Resent-Message-ID: <handler.31487.D31487.152918624519907.done@debbugs.gnu.org>
From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=)
References: <20180517225109.12033-1-ambrevar@gmail.com>
	<20180616145453.15816-1-ambrevar@gmail.com>
Date: Sat, 16 Jun 2018 23:57:16 +0200
In-Reply-To: <20180616145453.15816-1-ambrevar@gmail.com> (Pierre Neidhardt's
	message of "Sat, 16 Jun 2018 16:54:53 +0200")
Message-ID: <87zhzumm2r.fsf@gnu.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-patches/>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
	<mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org
Sender: "Guix-patches" <guix-patches-bounces+kyle=kyleam.com@gnu.org>
To: Pierre Neidhardt <ambrevar@gmail.com>
Cc: 31487-done@debbugs.gnu.org

Hello,

Pierre Neidhardt <ambrevar@gmail.com> skribis:

> * gnu/packages/patches/upx-protect-against-bad-crafted-input.patch: New f=
ile.
> * gnu/packages/compression.scm (upx)[source]: Use it.

I renamed the patch so that it includes the CVE id, added it to
gnu/local.mk, and committed.

Thanks!

Ludo=E2=80=99.