From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: [PATCH] gnu: ed: Replace with 1.14.1 [fixes security issues]. Date: Thu, 12 Jan 2017 22:56:51 +0100 Message-ID: <87o9zc54d8.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> References: <20170112201353.29406-1-mbakke@fastmail.com> <20170112215005.GA13508@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39794) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cRnMf-0000be-FG for guix-devel@gnu.org; Thu, 12 Jan 2017 16:56:58 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cRnMc-0002S3-C7 for guix-devel@gnu.org; Thu, 12 Jan 2017 16:56:57 -0500 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:55518) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cRnMc-0002RZ-50 for guix-devel@gnu.org; Thu, 12 Jan 2017 16:56:54 -0500 In-Reply-To: <20170112215005.GA13508@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain Leo Famulari writes: > On Thu, Jan 12, 2017 at 09:13:53PM +0100, Marius Bakke wrote: >> * gnu/packages/ed.scm (ed-1.14.1): New variable. >> (ed)[replacement]: New field. > > Can you add a comment with a link to the bug report? > > https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html Good find. I wonder, was this issue only present in the unreleased 1.14.0? I can't reproduce it with the current Guix version. I'll wait and see what the response on oss-sec is. Maybe we can just push the update to core-updates. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlh3+6MACgkQoqBt8qM6 VPo2dgf9Hp/eJQAvH/WUuWBHc6D/krHpwnM2Ve+OxSAdwNf50jcjEpT5mBvRiKHa 57oJVCU8AnwAiM29/2ec3P4yFLGu2QqpW2/9bi1p8c99tF+PHNbYvT/8B/IUtbmy slwscZbzKVDG18XIo10881KCNdkn1egj6mqxpKsBgFiWewUDICDEEOImeNaXDJMV aj3hK5pt+kREpsGZbapSshlGhak/d5hH/ubREVnPbEKin1HBtxAp9MAxUn6YhTif 7+dN08vbmcBPhD84OsTgim1YQuQZft+HSRpQ49eSLIbP2GQ2259VPhpdyXIeMiTi owxiho6ycMgH4tO33OlMqEqEO3OL6Q== =d9UW -----END PGP SIGNATURE----- --=-=-=--