From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:60207) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gdkKQ-00087T-St for guix-patches@gnu.org; Sun, 30 Dec 2018 18:17:07 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gdkKM-00068x-Fe for guix-patches@gnu.org; Sun, 30 Dec 2018 18:17:06 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:43402) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gdkKM-00068b-Cl for guix-patches@gnu.org; Sun, 30 Dec 2018 18:17:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gdkKM-0002jX-2B for guix-patches@gnu.org; Sun, 30 Dec 2018 18:17:02 -0500 Subject: [bug#33933] [PATCH 0/4] gnu: libextractor: Fix CVE-2018-{20430, 20431}. Resent-Message-ID: Received: from eggs.gnu.org ([208.118.235.92]:59524) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gdkJL-00081g-3Y for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:59 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gdkJH-0003zJ-3m for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:59 -0500 Received: from mail-pf1-x430.google.com ([2607:f8b0:4864:20::430]:36666) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gdkJG-0003wp-UE for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:55 -0500 Received: by mail-pf1-x430.google.com with SMTP id b85so12618135pfc.3 for ; Sun, 30 Dec 2018 15:15:54 -0800 (PST) From: Alex Vong Date: Mon, 31 Dec 2018 07:15:42 +0800 Message-ID: <87pntihaht.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 33933@debbugs.gnu.org Cc: alexvong1995@gmail.com --=-=-= Content-Type: text/plain Tags: security Hello, This patch series mainly fixes the latest CVEs found in libextractor, but it also upgrades other gnunet related packages to their latest version. Please also note that the versioning scheme for guile-gnunet is changed to use that of 'git-version'. Unfortunately, this would break "guix package --upgrade". But I think this change needs to be made at some point anyway, so we may as well do it now. Cheers, Alex --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQQwb8uPLAHCXSnTBVZh71Au9gJS8gUCXClRngAKCRBh71Au9gJS 8ud4AP93mEoxgSxC6a4cMHxYQKvhrvUqnG4BCLeTyL0mXqA0owD/di9bPnBXZ3Cu RdDa8xdmPU8ovEmhYSl19sgEQ3tTlgk= =YODP -----END PGP SIGNATURE----- --=-=-=--