From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH 1/1] gnu: expat: Fix CVE-2012-6702 and CVE-2016-5300. Date: Fri, 10 Jun 2016 20:34:44 -0400 Message-ID: <20160611003444.GC30132@jasmine> References: <52b2613e2f855f246b2d83427c9985f9b734685b.1465491831.git.leo@famulari.name> <87d1npyy23.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55007) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bBWtC-00014B-L0 for guix-devel@gnu.org; Fri, 10 Jun 2016 20:35:03 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bBWt8-0001kS-Cz for guix-devel@gnu.org; Fri, 10 Jun 2016 20:35:01 -0400 Content-Disposition: inline In-Reply-To: <87d1npyy23.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?iso-8859-1?Q?Court=E8s?= Cc: guix-devel@gnu.org On Fri, Jun 10, 2016 at 03:26:44PM +0200, Ludovic Courtès wrote: > Leo Famulari skribis: > > > * gnu/packages/patches/expat-CVE-2012-6702-and-CVE-2016-5300.patch: New file. > > * gnu/local.mk (dist_patch_DATA): Add it. > > * gnu/packages/xml.scm (expat): Use it. > > Should be ‘expat/fixed’, right? Right, thank you! > Otherwise LGTM, thanks! Applied as 436dd0463.