From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Bavier Subject: Re: [PATCH 1/1] gnu: cracklib: Fix CVE-2016-6318. Date: Tue, 16 Aug 2016 23:29:11 -0500 Message-ID: <20160816232911.08c0835f@openmailbox.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59809) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bZsTn-0004xM-To for guix-devel@gnu.org; Wed, 17 Aug 2016 00:29:28 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bZsTj-0007hX-47 for guix-devel@gnu.org; Wed, 17 Aug 2016 00:29:26 -0400 Received: from mail2.openmailbox.org ([62.4.1.33]:48127) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bZsTi-0007hR-Qq for guix-devel@gnu.org; Wed, 17 Aug 2016 00:29:23 -0400 In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org On Tue, 16 Aug 2016 22:49:55 -0400 Leo Famulari wrote: > * gnu/packages/patches/cracklib-CVE-2016-6318.patch: New file. > * gnu/local.mk (dist_patch_DATA): Add it. > * gnu/packages/password-utils.scm (cracklib)[source]: Use the patch. > --- > gnu/local.mk | 1 + > gnu/packages/password-utils.scm | 2 + > gnu/packages/patches/cracklib-CVE-2016-6318.patch | 95 +++++++++++++++++= ++++++ > 3 files changed, 98 insertions(+) > create mode 100644 gnu/packages/patches/cracklib-CVE-2016-6318.patch LGTM! Thanks for getting the patch so quick. =46rom the bug report it looks like we could get some real benefit from the hardening project thread you revived. `~Eric