From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id 4LnxD9YFJ2W0QAEAG6o9tA:P1 (envelope-from ) for ; Wed, 11 Oct 2023 22:30:14 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id 4LnxD9YFJ2W0QAEAG6o9tA (envelope-from ) for ; Wed, 11 Oct 2023 22:30:14 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 65C555B7DE for ; Wed, 11 Oct 2023 22:30:13 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lnikki.la header.s=fm3 header.b=aj0Lpsqb; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=BWMz67eo; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1697056214; a=rsa-sha256; cv=none; b=diQvcimGqigh8bC7u5aH8co7U1ivwcY+Dy2ljBazf60UxC2hBOfrQiRLMObpTYQWjBrk8M SfVvWhQLYJeBT1IFKL1/3HLnHWywat4WMKzi6F/2Wi0WR+fw1+X/2+hffa06VId8pTgAj9 hVTtcwzNyg9wIiS/3NZcyQvIsRIoB5g+66unpipLyFQULxuAedalIA8A5ddD8ivyYGHjf/ P1QlrP2f+9MM8VeOZ2dA4DgSsmxC0/eLMld735x3QcGgZd62VLMMJQJJaCKmjweQLwQiqr xtDtbRbcyRYb+a8+D4TfdEY6pj6m1cofOwE9AtQuL4u33CuGmBkYbolavdXLoQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lnikki.la header.s=fm3 header.b=aj0Lpsqb; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=BWMz67eo; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1697056214; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=mdeEaiRJtl5d/R6mIvXTi0gmREL6tAU1AtSJpcMU/Ds=; b=nzhS5hdTPn9012nYc0FbqYQjZM92W2v3PFjEllAIFxrwnhSNRDaesHMtApgZ/3YtXVsjfp 7c3EBarL2gnurBA6irCZlbaEPEmmG4g3sTEzx1eIn187k4OWMck+3zpsTfmHDRJr2W0A/6 N1H6yBvqyO2BvMUXcujtwK15dAgnvcWtnuYQS+/3j1TqRVxCY5w6dEOm1lgjfoHfp3vRw0 nQ2TfsDy98rCYsEa+gzXQKWo+nBZEOPoNUzpHXTvGBA8Y//MS/DG1Xye1cMa4BX9kI6FIt KzvOKSrtJaY7NY8qrQUHn4TG4H4JKPlT5nFgeSYZsYXx2W5ZYzASQ/lDj26gHA== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qqfpu-00039V-GF; Wed, 11 Oct 2023 16:29:42 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qqfpt-00039F-Jc for guix-patches@gnu.org; Wed, 11 Oct 2023 16:29:41 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qqfpt-0001Yz-BV for guix-patches@gnu.org; Wed, 11 Oct 2023 16:29:41 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qqfqE-0005Fz-SI for guix-patches@gnu.org; Wed, 11 Oct 2023 16:30:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#66428] [PATCH] gnu: libcue: Fix CVE-2023-43641. Resent-From: Leo =?UTF-8?Q?Nikkil=C3=A4?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 11 Oct 2023 20:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 66428 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: "Bruno Victal" Cc: 66428@debbugs.gnu.org Received: via spool by 66428-submit@debbugs.gnu.org id=B66428.169705615320048 (code B ref 66428); Wed, 11 Oct 2023 20:30:02 +0000 Received: (at 66428) by debbugs.gnu.org; 11 Oct 2023 20:29:13 +0000 Received: from localhost ([127.0.0.1]:40124 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qqfpR-0005DI-3O for submit@debbugs.gnu.org; Wed, 11 Oct 2023 16:29:13 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:33603) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qqfpL-0005CQ-Dg for 66428@debbugs.gnu.org; Wed, 11 Oct 2023 16:29:11 -0400 Received: from compute6.internal (compute6.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 356EC5C0340; Wed, 11 Oct 2023 16:28:38 -0400 (EDT) Received: from imap43 ([10.202.2.93]) by compute6.internal (MEProxy); Wed, 11 Oct 2023 16:28:38 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lnikki.la; h=cc :cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=fm3; t=1697056118; x=1697142518; bh=md eEaiRJtl5d/R6mIvXTi0gmREL6tAU1AtSJpcMU/Ds=; b=aj0Lpsqb8rcUnwQc/A zR+0+9T2u97G+6hV4xUXjUVhrF/qzXYpwq/xKGBoBwkoYeRf5G5Kr5HDhaJIiiS+ DOCpoBbu2Fs6QP7EekDKV97qDB0mtSQ3bbAJRdm1PsfEVOra01xCGOdBj1yPs21f UnVLKAx9/TsZPTxUspY40pAdTns3DRICkCiDTXfSYQ/CG5+q7YdbCx2yHj4h5Y9S Hay2xnUDgZpwnNpcvIaRSktuNHpSE0K0msAPfQBujGLNzVh54MLeuVnouKkQ2n8g lSe5xU8zaWK+4xqZXek1rlepwCJy5hw9Il4tIPtU0hTE1x3PCBc3wzLG8qZyF+Ff 2usA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; t=1697056118; x=1697142518; bh=mdeEaiRJtl5d/ R6mIvXTi0gmREL6tAU1AtSJpcMU/Ds=; b=BWMz67eokc+roUPbfmOgLXxp/zwtH g4s74/hrqmbpyVQLlEvt+t1XS9rJVo2f6u47iM8DVxcByOM6G+/REmKjbRwCT4YQ 5pvSztZyxblKusWaFHftY4OeJUABa7r68irdnTadBYGSzPmaPJd3AEH/kvWodeWS wnZD8p1scmLeJfXLnFR4RCldga0z4YnT22t7ewrDoEVAAxTs9tINC3CAWAFZ7b8+ YTw5ghcrULjhKgpxYeR0TtxfsfheJRhWqM46PzlQSTWu0K42+jWksaUwD70/QVEi H22eWU+NYUfdqo1pV6hiM9pSYFhnZvVWl0FA3nDcAbiZmQ1JiyrAggrJg== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrheekgddugeeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvvefutgesth dtredtreerjeenucfhrhhomhepnfgvohcupfhikhhkihhlmocuoehhvghllhhosehlnhhi khhkihdrlhgrqeenucggtffrrghtthgvrhhnpeekhfektdeiffegvdektdelleeuudffje ekfeejteffveeivdegkeehleejuedvudenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehhvghllhhosehlnhhikhhkihdrlhgr X-ME-Proxy: Feedback-ID: i41f146a7:Fastmail Received: by mailuser.nyi.internal (Postfix, from userid 501) id AD5B32D4008F; Wed, 11 Oct 2023 16:28:37 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.9.0-alpha0-1019-ged83ad8595-fm-20231002.001-ged83ad85 MIME-Version: 1.0 Message-Id: In-Reply-To: <987a1b4c-07e1-4284-9f58-ea0c0ce6c420@makinata.eu> References: <20231009201647.9891-1-hello@lnikki.la> <987a1b4c-07e1-4284-9f58-ea0c0ce6c420@makinata.eu> Date: Wed, 11 Oct 2023 20:27:16 +0000 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Leo =?UTF-8?Q?Nikkil=C3=A4?= X-ACL-Warn: , =?utf-8?q?Leo_Nikkil=C3=A4_via_Guix-patches?= From: =?utf-8?q?Leo_Nikkil=C3=A4_via_Guix-patches?= via Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx1.migadu.com X-Migadu-Spam-Score: -6.81 X-Spam-Score: -6.81 X-Migadu-Queue-Id: 65C555B7DE X-TUID: 7EdC0ktnMRAU > How about updating the package instead? Thanks for the heads up! I saw it took a while to cut the release, and other distros like Arch resorted to patching in the meantime. Here's a new patch to just update the package.