GNU bug report logs

#33933 [PATCH 0/4] gnu: libextractor: Fix CVE-2018-{20430,20431}.

PackageSource(s)Maintainer(s)
guix-patches PTS Buildd Popcon
Full log

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

Received: (at submit) by debbugs.gnu.org; 30 Dec 2018 23:16:01 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 30 18:16:01 2018
Received: from localhost ([127.0.0.1]:42678 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1gdkJN-0002hi-Hb
	for submit@debbugs.gnu.org; Sun, 30 Dec 2018 18:16:01 -0500
Received: from eggs.gnu.org ([208.118.235.92]:34020)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <alexvong1995@gmail.com>) id 1gdkJM-0002hT-2M
 for submit@debbugs.gnu.org; Sun, 30 Dec 2018 18:16:00 -0500
Received: from lists.gnu.org ([208.118.235.17]:44856)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <alexvong1995@gmail.com>)
 id 1gdkJL-00045e-Pv
 for submit@debbugs.gnu.org; Sun, 30 Dec 2018 18:15:59 -0500
Received: from eggs.gnu.org ([208.118.235.92]:59524)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <alexvong1995@gmail.com>) id 1gdkJL-00081g-3Y
 for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:59 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.2 required=5.0 tests=BAYES_05,
 FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <alexvong1995@gmail.com>) id 1gdkJH-0003zJ-3m
 for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:59 -0500
Received: from mail-pf1-x430.google.com ([2607:f8b0:4864:20::430]:36666)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
 (Exim 4.71) (envelope-from <alexvong1995@gmail.com>)
 id 1gdkJG-0003wp-UE
 for guix-patches@gnu.org; Sun, 30 Dec 2018 18:15:55 -0500
Received: by mail-pf1-x430.google.com with SMTP id b85so12618135pfc.3
 for <guix-patches@gnu.org>; Sun, 30 Dec 2018 15:15:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=from:to:cc:subject:user-agent:date:message-id:mime-version;
 bh=VT2zWsJW/Gynhl4bF4PnJGafhKY/iWzzAIsS4YSeXRw=;
 b=a8SQKOT3H+sQfa0eAUVBcCeg7+ad+9TlJ2O8JT6/YrnSNSbUUzbUGadjWoGrClmXG8
 sHpQvky49jgLuDfCvhy9RHXahXGcXzOamCPn0p3Ks2487Uc3ZTHX52iAKsqf64DnblJm
 4Spu6UVAsbene4foM5Cf3tIANQaHK4qCltk7ggyhGiGVsNy9wE1kz8xmiSoMeDB9yClE
 OD8KlWF1UEsAEmUI+a4ajLydWTp9ywc5X/x0XSrGHs2S7GlUTxu+48xVfpO953iHLOs4
 U7ErQM52jfW80TfhI2jny4cENzwFgXNUCcROs9K2G+nfF1T56hMKRjWobJSqXnoyV7ZM
 LWww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:user-agent:date:message-id
 :mime-version;
 bh=VT2zWsJW/Gynhl4bF4PnJGafhKY/iWzzAIsS4YSeXRw=;
 b=eyrXwEeHwHoWp9d14FWmaguFWPH8QaCZ0Jp6fUvFJAbb91GO0/dWG2TPDXeRhf2f3C
 JL7fBtMp4wc8WFovr2oAu2/JyLNN9Ve4M72d4gye8Mc60O5EW/IqeN6yEX0xm9qwwIWi
 OwkW8uFOsEpI/3AM9NdlAz/JhdDjyZmtkVsiG6gN4L4TL6Avhdu2ZegWau3Vut31rC8g
 /D2cBImdvYXJJCeKrM3BfVOijcRVHKzonrilYulE/VpXVbJzU8UCftABmxXjD7n9j2li
 oFZnpvb5iFpbxI6li+KRv2nr34kkhJKLubqh4A9lHJM5Vg4VI4e1IE0uJrkL9OWtriU7
 d4vg==
X-Gm-Message-State: AJcUuke8PnsZM65l+jk/JGNi5j9IJRq8SEMnbzxv15PhXIHtcBiNOQmP
 ylf6AwRBo46W1oylWPROfOo=
X-Google-Smtp-Source: ALg8bN4N0d2jjbILR5ptNdR1XiSz58MkwM5uVAm9dQA3EnWgYK4U73shfXnGt22n0xc9BgCUW/Cc8g==
X-Received: by 2002:a63:f615:: with SMTP id m21mr5917220pgh.428.1546211753777; 
 Sun, 30 Dec 2018 15:15:53 -0800 (PST)
Received: from debian (n058152176116.netvigator.com. [58.152.176.116])
 by smtp.gmail.com with ESMTPSA id v5sm78667054pgn.5.2018.12.30.15.15.52
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Sun, 30 Dec 2018 15:15:52 -0800 (PST)
From: Alex Vong <alexvong1995@gmail.com>
To: guix-patches@gnu.org
Subject: [PATCH 0/4] gnu: libextractor: Fix CVE-2018-{20430,20431}.
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
Date: Mon, 31 Dec 2018 07:15:42 +0800
Message-ID: <87pntihaht.fsf@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
X-detected-operating-system: by eggs.gnu.org: Genre and OS details not
 recognized.
X-Received-From: 2607:f8b0:4864:20::430
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Spam-Score: -3.8 (---)
X-Debbugs-Envelope-To: submit
Cc: alexvong1995@gmail.com
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -4.8 (----)
[Message part 1 (text/plain, inline)]
Tags: security

Hello,

This patch series mainly fixes the latest CVEs found in libextractor,
but it also upgrades other gnunet related packages to their latest
version.

Please also note that the versioning scheme for guile-gnunet is changed
to use that of 'git-version'. Unfortunately, this would break
"guix package --upgrade". But I think this change needs to be made at
some point anyway, so we may as well do it now.

Cheers,
Alex
[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 10:37:36 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.