From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:44075) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dId5z-0007w6-N8 for guix-patches@gnu.org; Wed, 07 Jun 2017 11:42:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dId5u-0008Kn-Qy for guix-patches@gnu.org; Wed, 07 Jun 2017 11:42:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:58980) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dId5u-0008Kh-Mp for guix-patches@gnu.org; Wed, 07 Jun 2017 11:42:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dId5u-0006sJ-Fi for guix-patches@gnu.org; Wed, 07 Jun 2017 11:42:02 -0400 Subject: bug#27263: [PATCH 2/2] gnu: perl: Fix CVE-2017-6512 in File::Path. Resent-Message-ID: Date: Wed, 7 Jun 2017 11:40:56 -0400 From: Leo Famulari Message-ID: <20170607154056.GB16629@jasmine> References: <031e297c96cc7522ca42331605079a8462784466.1496718250.git.leo@famulari.name> <87shjc66z2.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Bn2rw/3z4jIqBvZU" Content-Disposition: inline In-Reply-To: <87shjc66z2.fsf@gnu.org> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 27263@debbugs.gnu.org --Bn2rw/3z4jIqBvZU Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jun 07, 2017 at 01:18:09AM +0200, Ludovic Court=C3=A8s wrote: > Leo Famulari skribis: >=20 > > * gnu/packages/perl.scm (perl)[replacement]: New field. > > (perl/fixed): New variable. > > * gnu/packages/patches/perl-file-path-CVE-2017-6512.patch: New file. > > * gnu/local.mk (dist_patch_DATA): Add it. >=20 > OK too. >=20 > I suppose we=E2=80=99ll have to apply it in core-updates too, right? Yes, I'm working on this today. --Bn2rw/3z4jIqBvZU Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlk4HogACgkQJkb6MLrK fwjNyw/+MUjoNeW7suH6sBm1DsezH8JuSG9idQPBGvB2ZwELqqyHIvwGvwg2DDdu j2WsHvXsxE9cCW3JccmLc+3FdRhVrehc0yoSQhDu3AGHamxycIzqZ95okfd1mdMv 8fcN+bSGm8yFCpdyNq9g1yCck6XcdTShJUzpwEUf6vinjpdoXBwJGxJh2QzcQOE4 t+WG+S01jyzyCIG9ZVQB72/5Ne1XHHe1uD3VcEVkRGgG10lPahngo47C27QR6v7A mH4VgkQmMikAZFggX0/ulcKEdcdgFjNfT4qWARX1O9KXC1Gp5diO9Bv+2UZ4r60Q eJQRS2N3CrMjNFEQeTNxOSYAjiJuPvZ31d+0HJSZSc/Mtve/vsbsQFU+Ya2RimSe M+ASsPZG33YGSIQfnsNqfQmebe5O3bvIdj/n2Qq/RS7O4yniuviFOYF4s+wyU2LV eWrmcnZD1mVtE8OLGGOfcKoogt2+wKQbrn66OC1LTvBYdniE3bAsQ/4QOH3jPdmP OrvdbWt/doMLZ/PyFAHYlV9mnCLaRtXR+t15UdW27tBKYnIz9mPA3/IY8PVPVDyx YCX0nPeT+AhQLoXTM1D5bieUtRNuxZtq0fniwRl5ZwpK61J1ZtgAhj3msLG3ijd5 rl1MEqgmB0/qCaoD+9lrwe03u4ix3ELUtYz8T3OK8Ac3Tjl/Wsg= =QCEK -----END PGP SIGNATURE----- --Bn2rw/3z4jIqBvZU--