From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:33616) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d7szZ-0002wB-VL for guix-patches@gnu.org; Mon, 08 May 2017 20:27:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d7szW-0003Lp-Pm for guix-patches@gnu.org; Mon, 08 May 2017 20:27:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:57755) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d7szW-0003Lk-Ly for guix-patches@gnu.org; Mon, 08 May 2017 20:27:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1d7szW-0004yd-FC for guix-patches@gnu.org; Mon, 08 May 2017 20:27:02 -0400 Subject: bug#26836: [PATCH] gnu: libarchive: Update to 3.3.1. Resent-To: guix-patches@gnu.org Resent-Message-ID: From: Kei Kebreau References: <20170508190714.15902-1-kei@openmailbox.org> <20170508192548.GA20051@jasmine> <878tm7kqbf.fsf@openmailbox.org> <20170508215611.GA3476@jasmine> Date: Mon, 08 May 2017 20:26:22 -0400 In-Reply-To: <20170508215611.GA3476@jasmine> (Leo Famulari's message of "Mon, 8 May 2017 17:56:11 -0400") Message-ID: <87r2zykh8x.fsf@openmailbox.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Leo Famulari Cc: 26836-done@debbugs.gnu.org --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Leo Famulari writes: > On Mon, May 08, 2017 at 05:10:28PM -0400, Kei Kebreau wrote: >> Leo Famulari writes: >>=20 >> > On Mon, May 08, 2017 at 03:07:14PM -0400, Kei Kebreau wrote: >> >> Fixes CVE-2016-{10209,10350} and CVE-2017-5601. >> >>=20 >> >> * gnu/packages/backup.scm (libarchive): Update to 3.3.1. >> > >> > Thanks! >> > >> > Can you use a graft instead? Then, the commit message can be like this: >> > >> > gnu: libarchive: Replace with 3.3.1 [security fixes]. >> > >> > Fixes CVE-2016-{10209,10350}, CVE-2017-5601. >> > >> > * gnu/packages/backup.scm (libarchive)[replacement]: New field. >> > (libarchive-3.3.1): New variable. >>=20 >> Like the patch I've attached? > >> From 45d3157bb61bb8b5f26ff13feb672759b6043e6f Mon Sep 17 00:00:00 2001 >> From: Kei Kebreau >> Date: Mon, 8 May 2017 14:58:07 -0400 >> Subject: [PATCH] gnu: libarchive: Replace with 3.3.1 [security fixes]. >> To: 26836@debbugs.gnu.org >>=20 >> Fixes CVE-2016-{10209,10350} and CVE-2017-5601. >>=20 >> * gnu/packages/backup.scm (libarchive)[replacement]: New field. >> (libarchive-3.3.1): New variable. > > Thanks, LGTM! Great! Pushed to master. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEg7ZwOtzKO2lLzi2m5qXuPBlGeg0FAlkRDK4ACgkQ5qXuPBlG eg3nRRAAqBQl2/cyUOsJEJ0tiej3G3CWG8Rnqe9aIk/h6U4vKvWYwZQAha9BSY4D 8xCVHuyhcsWKnO/VJsRFwYdF2f6e5PZWDCyrygMIqB75xQKAFu0/bONkxcqDxf2H jxEK5CamjFetH7qNrmINXEX4dnkeBFR7gvHVZ8vsh+VdXf6AwRGgixw90/yx5cKv 0BtKi04b3WX4kr+kPjXdOghbQz7quMEJiPRG2pN9U442ci0Xm5BCQvSn4N2WYJtu VV8eS/E59LqkCtSM+oQel/V+V69psO2moR+gc4Hcza+23gWRs5O5+iiqGScjCC5m EPIoLq0k61LXO6K+OM0w6fDo3kEy7QEdxysqu8vAnEdMZfKlNBjypSM8f7SKSWgm QgcFqmomS0ULJ8UhmqkeI1U8Zrftb3Lurf7IBvk0MYV612XH9A7be4qy3KAIievU Ao4mCzogYkaSHJuo/WG6roRI6drsirhqwX7FY2fDi6folKT753EMMwc3ACI0Wqld H2ygZ6Wo3Qm210Re2+jdtHFZze2m/DPTpRmLXgkxOMVZKUUVOVNRm6Hzni4PGpmA DpJe98fkwEQHgc3GoaZkM6YweDfiaoCECaXNwlqhIBuvkCfOFGu+Y3Y6YUS+ABxN mfYiHFebSyWDCAnm6RwLi+dDjaNR48NQW/EnEShj8DbANG5VD54= =JCoZ -----END PGP SIGNATURE----- --=-=-=--