From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: [PATCH] gnu: ed: Replace with 1.14.1 [fixes security issues]. Date: Thu, 12 Jan 2017 23:30:59 +0100 Message-ID: <87inpj6hcs.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> References: <20170112201353.29406-1-mbakke@fastmail.com> <20170112215005.GA13508@jasmine> <87o9zc54d8.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <20170112221723.GA20450@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45725) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cRnth-0004M0-No for guix-devel@gnu.org; Thu, 12 Jan 2017 17:31:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cRnte-0003pW-J0 for guix-devel@gnu.org; Thu, 12 Jan 2017 17:31:05 -0500 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:34698) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cRnte-0003pG-BR for guix-devel@gnu.org; Thu, 12 Jan 2017 17:31:02 -0500 In-Reply-To: <20170112221723.GA20450@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Leo Famulari writes: > On Thu, Jan 12, 2017 at 10:56:51PM +0100, Marius Bakke wrote: >> Leo Famulari writes: >>=20 >> > On Thu, Jan 12, 2017 at 09:13:53PM +0100, Marius Bakke wrote: >> >> * gnu/packages/ed.scm (ed-1.14.1): New variable. >> >> (ed)[replacement]: New field. >> > >> > Can you add a comment with a link to the bug report? >> > >> > https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html >>=20 >> Good find. I wonder, was this issue only present in the unreleased >> 1.14.0? I can't reproduce it with the current Guix version. > > Good catch; I can only reproduce it with 1.14, and the ed maintainer > points out that it was introduced in 1.14. > >> I'll wait and see what the response on oss-sec is. Maybe we can just >> push the update to core-updates. > > I think it's fine for core-updates. Me too; pushed. Thanks for checking! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlh4A6MACgkQoqBt8qM6 VPr9OAf+Nq8AsyburXsTArU3ifis4IL1uFENpJQaH7WhML2Qh+EJC3wrYSTxnUfU 0nGZoxsmouJ/rkK9uI538mt60LfBVHgZp2R+4if0iKp7AXBdYBNVplri1EeSG4Ar o1j0U7Z0w9n1FoDTAPahgGXHN4p7uxs3szPsbks/pZht0RAOv94DEQyxtMRinHTb BbnuDpZQyOlbSpGNQLgzBlrIJyvBjcaEKacuwx0N7WBJ+phzHaK3bwgFh+dj0eH9 j200Cg8lJ2cnSlgWp8kllubZutM3ubp+O3aisKNivjQg8f53ql3rqDAdTFEGg/uA 3S7UNWqNPce8bpmHqBa2G6PrOHHMVg== =02Hz -----END PGP SIGNATURE----- --=-=-=--