From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: preparing the next release v0.15.0 Date: Wed, 20 Jun 2018 23:11:55 +0200 Message-ID: <87fu1hf9ic.fsf@fastmail.com> References: <87in6mbdkt.fsf@elephly.net> <87tvpzvntv.fsf@elephly.net> <87tvpzlzq5.fsf@fastmail.com> <87bmc55mmh.fsf@posteo.net> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46241) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fVkOY-0002GC-6k for guix-devel@gnu.org; Wed, 20 Jun 2018 17:12:03 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fVkOU-0004gI-6S for guix-devel@gnu.org; Wed, 20 Jun 2018 17:12:02 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:40113) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fVkOU-0004gD-1T for guix-devel@gnu.org; Wed, 20 Jun 2018 17:11:58 -0400 In-Reply-To: <87bmc55mmh.fsf@posteo.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Kei Kebreau Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Kei Kebreau writes: > Marius Bakke writes: > >> On the NEWS side, here is what springs to mind: >> > [...] >> * Packages can specify that some CVEs don't apply to them > > Around when (or what commit) was this feature introduced? It was added in commit f4007b25476dfd97885f358d2dabbd463f6f6017, but there has been little fuzz or discussions around it. I've been meaning to fix false positives from `guix lint -c cve` for a while, but did not get around to it yet. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlsqwxsACgkQoqBt8qM6 VPoErggAkCYFSW/ErkaGcWnOodxXxEU7A8kD4seDRfvj9l/B0J9IUDXxG7O1OG0z Fs/rLv5hJ7lOH4k3k+tX8MS8rm6j2FZsyCfQHvOuR9Df4l8Q8SdArVBpw/0Bln0Z IGp1/jBs51SthFZNYkkqxVTLzNKs3IQW0dFCucJmk0IQ2R0Gok+MLxlWEk7ZNrIC clpEJlsh6wm03+ws+mvXvcTzPpNrZUUYDglh5ElN1RnE/crfEG7VwV3/aLGFb4uu bSRBBSmtjDigyOpfEnSkMnhqFrQc2B/ExAOzxD46zD9uHIZ5VYR3TKSJoTPFLnER EN4LcySPuarJFr2YzI+7V27NqmEn4w== =hPxL -----END PGP SIGNATURE----- --=-=-=--