From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: libssh vulnerability Date: Sun, 21 Oct 2018 13:14:45 -0700 Message-ID: <87pnw3m4zu.fsf@gmail.com> References: <87efcp74ip.fsf@dustycloud.org> <87bm7ti3hd.fsf@gnu.org> <20181017054252.GA21802@jasmine.lan> <87woqgiuiv.fsf@dustycloud.org> <87o9bope37.fsf@gmail.com> <20181021191919.GB18445@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39194) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gEK7i-0000E8-L2 for guix-devel@gnu.org; Sun, 21 Oct 2018 16:14:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gEK7d-0005m3-NM for guix-devel@gnu.org; Sun, 21 Oct 2018 16:14:54 -0400 Received: from mail-pl1-x62f.google.com ([2607:f8b0:4864:20::62f]:38348) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gEK7d-0005lf-G8 for guix-devel@gnu.org; Sun, 21 Oct 2018 16:14:49 -0400 Received: by mail-pl1-x62f.google.com with SMTP id w13-v6so670215plp.5 for ; Sun, 21 Oct 2018 13:14:49 -0700 (PDT) In-Reply-To: <20181021191919.GB18445@jasmine.lan> (Leo Famulari's message of "Sun, 21 Oct 2018 15:19:19 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: Guix-devel --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Leo Famulari writes: > It's true that libssh2 has too many dependents to update without a > graft. However, libssh, which is what was changed, only has a handful of > dependents, which is convenient for us :) Oh, I see - I was confused and incorrectly thought you had updated libssh2. Sorry for the confusion! =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEy/WXVcvn5+/vGD+x3UCaFdgiRp0FAlvM3jUACgkQ3UCaFdgi Rp3XwRAApGfIrzZS6xV215MFjj4dTQP9GSOXAeLq/bQ9QPFG5cNW5KnH5C2LPBvD 06QvhGCtsVZdTaLNh4uDTGJW9ZH1pcRVl7jqgQbuqcVSIc+DAZAxd2ylRIkGDLNh KoXdvJ+mjGpKP/wc1/YDjTzhDpKAEVhXpjreB/UfPlAWnqaxoWjSB5YrCn28rPqp H7KvmSEECXBXg7e7KMXZNKhFyKp6iRvsO1jTbrWetByXnrRX2ovFzWrHVrSFC09m DGsxTlV3YQVgzj2jxqrd7G05eDF2ZMId6QYWN2zo6M6nYn7IBsYXwf2fr4KvvoGK x/8YlNoLoeJpsBIC/rTxTcUEHJ+UFWEqSc09202PcrLc8w8I3mgfoXV8KC+tjLbm NIdlt33oE4Lrf2GN9BEVmhtpKlq8bXoMiDZQ+6KmD+oNeNv5jysx2w/pT7O5M93b ekveKkkKMjYf9jkoeWxznANjsJM5oU0HLgx4ex71K2MoSPIC4/R+EkvMhoqyjFmn ZPznL+XGroZMqVAfHgfVNQUVpWlJ6qCBsLPWqYjt1YodFMN3rNsnzWaeZKFdeXmP ItEUWmXUVGRpvLz3xJXKmJZISCeKhk8f3JdEkMMgnL1vp/PIWewB00YeTymBzolT /KMRUmBlg2c30wZZwjDKiI93ZsBfjOzCCtR2n5wzRf2UPRG38Jk= =uNyY -----END PGP SIGNATURE----- --=-=-=--