From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: [PATCH 0/1] Update OpenLDAP, fixing CVE-2015-6908 Date: Fri, 22 Apr 2016 23:28:20 -0400 Message-ID: <87y485f1gr.fsf@netris.org> References: Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45067) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1atoFP-0001aG-KZ for guix-devel@gnu.org; Fri, 22 Apr 2016 23:28:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1atoFM-0007Pm-F8 for guix-devel@gnu.org; Fri, 22 Apr 2016 23:28:43 -0400 Received: from world.peace.net ([50.252.239.5]:37740) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1atoFM-0007Pi-C4 for guix-devel@gnu.org; Fri, 22 Apr 2016 23:28:40 -0400 In-Reply-To: (Leo Famulari's message of "Thu, 21 Apr 2016 14:57:48 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari writes: > There is a remote denial of service bug in OpenLDAP in version 2.4.42 > and earlier [0]. > > This patch updates OpenLDAP to the latest version. > > This change will require several hundred packages to be rebuilt. Should > it go on security-updates? Your advice requested... I think we'll need to graft this. Would you like to try grafting it on your own system, see if anything obvious breaks, and then report back? Thank you! Mark