From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id iMyWD0s1WmC+FQAA0tVLHw (envelope-from ) for ; Tue, 23 Mar 2021 18:36:59 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id 6KaIC0s1WmAgQgAA1q6Kng (envelope-from ) for ; Tue, 23 Mar 2021 18:36:59 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 867EC194D2 for ; Tue, 23 Mar 2021 19:36:58 +0100 (CET) Received: from localhost ([::1]:42786 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lOltg-00066e-Dq for larch@yhetil.org; Tue, 23 Mar 2021 14:36:56 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40758) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lOkuo-0008W1-4P for bug-guix@gnu.org; Tue, 23 Mar 2021 13:34:07 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:49604) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lOkun-00088z-TA for bug-guix@gnu.org; Tue, 23 Mar 2021 13:34:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lOkun-0004wJ-Ps for bug-guix@gnu.org; Tue, 23 Mar 2021 13:34:01 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#47342: [PATCH 2/2] gnu: java-xstream: Update to 1.4.16 [security fixes]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 23 Mar 2021 17:34:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47342 X-GNU-PR-Package: guix X-GNU-PR-Keywords: security To: 47342@debbugs.gnu.org X-Debbugs-Original-To: =?UTF-8?Q?L=C3=A9o?= Le Bouter via Bug reports for GNU Guix X-Debbugs-Original-Cc: =?UTF-8?Q?L=C3=A9o?= Le Bouter , 47342@debbugs.gnu.org, julien lepiller Received: via spool by submit@debbugs.gnu.org id=B.161652083718976 (code B ref -1); Tue, 23 Mar 2021 17:34:01 +0000 Received: (at submit) by debbugs.gnu.org; 23 Mar 2021 17:33:57 +0000 Received: from localhost ([127.0.0.1]:32917 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lOkui-0004vz-UL for submit@debbugs.gnu.org; Tue, 23 Mar 2021 13:33:57 -0400 Received: from lists.gnu.org ([209.51.188.17]:43472) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lOkuc-0004vb-Gf for submit@debbugs.gnu.org; Tue, 23 Mar 2021 13:33:54 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40718) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lOkuc-0008BB-AI for bug-guix@gnu.org; Tue, 23 Mar 2021 13:33:50 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:49589) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lOkuZ-0007zP-G3 for bug-guix@gnu.org; Tue, 23 Mar 2021 13:33:48 -0400 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id EC9CB5C0076; Tue, 23 Mar 2021 13:33:46 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 23 Mar 2021 13:33:46 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=FIg054yhZQ+S5BCK7437Didtw1baG14yUc0syj10UW4=; b=cgJrdF0T1ViT pPICMdS252hos7HETGmkieOhitRPSqgnlvtaRxE+i78wE4+hzxW0XBSRw2Sx9us8 wv5BPcrNb0amyWxi2thZ2vj+Capya6gXG9Q4r47QJakuQn7X3/DgOWjTkh9Wi0q4 OlpoVZFwryrrzZRywKD8faDfK8DrIQA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=FIg054yhZQ+S5BCK7437Didtw1baG14yUc0syj10U W4=; b=NpeqyzrJ5BrEZzcAL6B30exhBeXsD07gvBXoqcfK6SdBgX7RQuU7tLDoC YRsORHD56hj+R5QQikb6nvEuKza39lXWBm1fXymgv1IP/JIasSLPWE+jdK8Wu5k2 7bWcUXeTAJdCB1OmipOzi+dw8g6GtEXL5HPCCfksUFCZCv4ZW85BwWaroyzmPiCV 4h5i+l+aaU1AmPZvBMXSmJ1Fl0537MSL58ivPeANPdu1BMk+bhHDz0eyHxpHd4tW jca2+p0+Vv1WH92qyn6s54TNvKTQJl0t1bDoXtuoiODqth4ZhhtTGUNz4y7Zawky co29q6gFYq3mD2xcwKsvMZqVLkaeQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudegiedguddtvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttddunecuhfhrohhmpefnvgho ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg htthgvrhhnpeeuueegudfgvdfgveeuvdeludelfeejhfeggfejtefggeekudekhfdvfeel jeehgfenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivg eptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghm vg X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA id 987131080064; Tue, 23 Mar 2021 13:33:46 -0400 (EDT) Date: Tue, 23 Mar 2021 13:33:45 -0400 From: Leo Famulari Message-ID: References: <20210323143840.22600-1-lle-bout@zaclys.net> <20210323143840.22600-2-lle-bout@zaclys.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20210323143840.22600-2-lle-bout@zaclys.net> Received-SPF: pass client-ip=66.111.4.28; envelope-from=leo@famulari.name; helo=out4-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: roptat@lepiller.eu Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616524618; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=FIg054yhZQ+S5BCK7437Didtw1baG14yUc0syj10UW4=; b=fZEJLh2V1ekjlVCujylVgWZ6x96U46fmLiw8jkWZ6TfPfbEfz+xJ/WnCt/r0rLLKiAupdk j05F3+yittTaApPplgJzcbFLf4Zw1KuPLuj1gQBfCuMbSXp/GAFE0DeK/FMCSIOdopkS96 0wTbivPEhDPFDh+wKn4wSqT5PgpSvB247QaHYiS7JYC4Lrc8Fboe7SNDyRd3qGWSBIDnx+ 0PyEHQSBcVk28t8FEGO7N2/v3gGKJKQhrye6vPV1i8JEYqk2EpYaCQ+6yrVXK+HsHHxanZ w8S79GDqyNOZW1Inj1SnwlNpnJ6I8ZIk63YB1BGGuyxP7uD53ygoUTEtsNDrqg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616524618; a=rsa-sha256; cv=none; b=PDkbeg2HPqWp1xt7scfxMeToVkj2KYX1NpmumsescvLmK/ORZKp+EnA1cyop6GuiB95Be9 pZUTFR2Kqit6G2OSM9cRGUVnua8WliL0NLPOUQpu3oLLKwmjwm2RovhrrJjoH6Y21GfJG1 kcLXPVxmIE32bJSVjdzd2iPkX/0MBvi9sjuZgrh72a2xDLriZokqN0fGA6Eum4OdzwfAu5 dHGTUZ5HapUF89KIesiivSwTYYp0vcKiRIZI7nRuyJIAzXg0YaBj3HjgaOLblImcBVKTwU o7wB9Fc9qArHUGgr40RIwN+2QaXBHtgqKIW76AvDeRWGi7Lkc205aWUhjg8QbQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=cgJrdF0T; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=NpeqyzrJ; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -1.42 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=cgJrdF0T; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=NpeqyzrJ; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 867EC194D2 X-Spam-Score: -1.42 X-Migadu-Scanner: scn0.migadu.com X-TUID: QUQpeM+DX1Ig On Tue, Mar 23, 2021 at 03:38:40PM +0100, Léo Le Bouter via Bug reports for GNU Guix wrote: > Fixes CVE-2021-21341, CVE-2021-21342, CVE-2021-21343, CVE-2021-21344, > CVE-2021-21345, CVE-2021-21346, CVE-2021-21347, CVE-2021-21348, > CVE-2021-21349, CVE-2021-21350 and CVE-2021-21351. > > * gnu/packages/xml.scm (java-xstream): Update to 1.4.16. > [inputs]: Replace java-xpp3 with java-mxparser, the latter being a fork of the > former made by upstream. Thanks for the patch! Pinging Julien...