From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: [PATCH 0/2] Fix URLS for fuse and sshfs-fuse and update fuse Date: Sat, 26 Dec 2015 01:44:30 -0500 Message-ID: Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58228) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aCian-00064x-I3 for guix-devel@gnu.org; Sat, 26 Dec 2015 01:44:42 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aCiai-0007UT-FZ for guix-devel@gnu.org; Sat, 26 Dec 2015 01:44:41 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:38758) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aCiai-0007UG-BU for guix-devel@gnu.org; Sat, 26 Dec 2015 01:44:36 -0500 Received: from localhost.localdomain (unknown [73.46.63.161]) by mail.messagingengine.com (Postfix) with ESMTPA id 2330CC013FE for ; Sat, 26 Dec 2015 01:44:33 -0500 (EST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org The libfuse project has moved their home to Github and so fuse and sshfs-fuse have new source URLs. There is a new version of fuse. The new source URLs are a mess. All the old bootstrapped versions are under a directory named for the current release. There are non-bootstrapped auto-generated Github tarballs available under saner URLs. For now, I think we should use the "messy" URL to fix the packaging and upgrade to the current release (2.9.4). When 2.9.5 or 3.0.0 comes out, I expect the situation will improve. CVE-2015-3202 is fixed in 2.9.4: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202 Leo Famulari (2): gnu: fuse: Update to 2.9.4. gnu: sshfs-fuse: Update source URL. gnu-system.am | 1 - gnu/packages/linux.scm | 20 ++++++--- gnu/packages/patches/fuse-CVE-2015-3202.patch | 65 --------------------------- 3 files changed, 13 insertions(+), 73 deletions(-) delete mode 100644 gnu/packages/patches/fuse-CVE-2015-3202.patch -- 2.6.2