Re: openssh vulnerability

[Chris Marusich <cmmarusich@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1250 bytes --]

Christopher Lemmer Webber <cwebber@dustycloud.org> writes:

> Leo Famulari writes:
>
>> [...]
>>
>> Patch at <https://bugs.gnu.org/33067>
>
> Yay, thanks Leo!

Thank you for the fix!  It looks like this change
(eed00f93e8999712191e39c59c15e23461520f43) went to master:

--8<---------------cut here---------------start------------->8---
$ git branch -a --contains eed00f93e8999712191e39c59c15e23461520f43
* (HEAD detached at 7d1f21c69)
  master
  remotes/origin/HEAD -> origin/master
  remotes/origin/master
  remotes/origin/wip-next-browser3
--8<---------------cut here---------------end--------------->8---


Will this change trigger many rebuilds?  It has many dependents:

--8<---------------cut here---------------start------------->8---
$ guix refresh -l libssh2
Building the following 1321 packages would ensure 3307 dependent
packages are rebuilt: [...]
--8<---------------cut here---------------end--------------->8---

I looked into this email thread mainly because I was curious to see how
we would apply the security update.  I thought we would use grafts
somehow, but this looks like we just changed the package definition on
master, which will result in more rebuilds than usual - right?

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]