Ludovic Courtès writes: > Hi! > > Pierre Langlois skribis: > >>>From 97a5d71bd50c72d2d7562a7d22baca04f4987657 Mon Sep 17 00:00:00 2001 >> From: Pierre Langlois >> Date: Tue, 18 Aug 2020 18:38:01 +0100 >> Subject: [PATCH] gnu: taglib: Update to 1.12-beta-1. >> >> This switches to a yet unreleased version of taglib, to make sure long >> standings issues and CVEs are covered until a proper release is made upstream. >> >> Among these, we have: >> >> - CVE-2017-12678 >> - CVE-2018-11439 >> - https://github.com/taglib/taglib/issues/864 >> >> * gnu/packges/mp3.scm (taglib): Update to 1.12-beta-1. >> [source]: Switch to using git-fetch. > > It’s a good idea to add “[security fixes]” or to list CVEs in the > subject line of the commit log. > > Otherwise LGTM! > > You can now use your new super commit powers to push it. :-) Whoohoo! done :-)