From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:33950) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gf7d7-00078y-US for guix-patches@gnu.org; Thu, 03 Jan 2019 13:22:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gf7d4-0000yb-R4 for guix-patches@gnu.org; Thu, 03 Jan 2019 13:22:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:42326) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gf7d4-0000yR-Hs for guix-patches@gnu.org; Thu, 03 Jan 2019 13:22:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gf7d4-0004ha-7f for guix-patches@gnu.org; Thu, 03 Jan 2019 13:22:02 -0500 Subject: [bug#33933] [PATCH 0/4] gnu: libextractor: Fix CVE-2018-{20430, 20431}. Resent-Message-ID: Date: Thu, 3 Jan 2019 13:20:56 -0500 From: Leo Famulari Message-ID: <20190103182056.GA2707@jasmine.lan> References: <87pntihaht.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="n8g4imXOkfNTN/H1" Content-Disposition: inline In-Reply-To: <87pntihaht.fsf@gmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Alex Vong Cc: 33933@debbugs.gnu.org --n8g4imXOkfNTN/H1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Dec 31, 2018 at 07:15:42AM +0800, Alex Vong wrote: > Tags: security >=20 > Hello, >=20 > This patch series mainly fixes the latest CVEs found in libextractor, > but it also upgrades other gnunet related packages to their latest > version. >=20 > Please also note that the versioning scheme for guile-gnunet is changed > to use that of 'git-version'. Unfortunately, this would break > "guix package --upgrade". But I think this change needs to be made at > some point anyway, so we may as well do it now. Thanks, please push :) --n8g4imXOkfNTN/H1 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlwuUoUACgkQJkb6MLrK fwiV/RAAvUUSegQNRWAyeio/goh2jskhbjBe+e7bVsIOIAFKIJIPXeFW0woprESi jAwwPqNYxwbu7HKIgPxguKiRgM6lDOIL/aTN1VmaQKCBeKlviCHi8Ufm/pBc/01K 74TIGiD1P2CqONohy899Yhg8JMfeOlqFkfeReo3ne3Ehzz73RBk5o7uW+5yXpIIc HKNzE0xBBxYIvh5cIg0GwehwQA9UZpFMxvSfX6K/OQgiCQT0ilr1J4L1bTTRfQav mAxATVKtRmlekvxVNrJDqRbaNH23j7GdeDmpSiCdvmgHteBzNdmQBG6nYa81ZB0J 2gIcmgJFwSqIr9aACUN37hoAv0+t4LOHJbfAl6/nkVVEEzsUSSlh9nGj1AsCgOke qq0FmFYlbAXVxqjYI1M4zulEL4fmB9G7mWFfABAalBjkx0MO6g6A20L0KB7SHEu8 yQghP52hD4/15WMHiTFdwkg/Jh0Bztf96c1FFWhKAzudu4ijjU5OCNoGMoHHqkEp iLkRAmZwE0K2SZ0Srff3fGrzyY//WTnqkjMxiT1Bb69xRPL11k91D4+UH+2IlHz/ vaLDcedRQ/r8s2QUNDKuwKn9eKItDvQlU8ujFxktdaPlXGdK5pZ6q2BEe6mF/UE5 QIft9BJGzXXzd6h3tN8Tg1gcmNrc5GLcRZ1Mn+cQY8EY2eRzuGE= =4n64 -----END PGP SIGNATURE----- --n8g4imXOkfNTN/H1--