GNU bug report logs

#54414 [SECURITY] gnu: expat: Update to 2.4.7.

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Reported by Leo Famulari <leo@famulari.name>
Date 2022-03-16T00:15:02
Severity normal
Tags security
Done Leo Famulari <leo@famulari.name>
Bug is Archived

Reply or subscribe to this bug. View this bug as an mbox, status mbox, or maintainer mbox

Report forwarded to guix-patches@gnu.org:
bug#54414; Package guix-patches. (Wed, 16 Mar 2022 00:15:02 GMT) (full text, mbox, link).

Acknowledgement sent to Leo Famulari <leo@famulari.name>:
New bug report received and forwarded. Copy sent to guix-patches@gnu.org. (Wed, 16 Mar 2022 00:15:02 GMT) (full text, mbox, link).

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

This fixes some regressions in 2.4.5 and 2.4.6:

https://www.xml.com/news/2022-02-expat-246/
https://www.xml.com/news/2022-03-expat-247/

* gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.
---
 gnu/packages/xml.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm
index 3ce5e771c7..49275c3e0c 100644
--- a/gnu/packages/xml.scm
+++ b/gnu/packages/xml.scm
@@ -158,7 +158,7 @@ (define-public expat
 (define expat/fixed
   (package
     (inherit expat)
-    (version "2.4.5")
+    (version "2.4.7")
     (source (let ((dot->underscore (lambda (c) (if (char=? #\. c) #\_ c))))
               (origin
                 (method url-fetch)
@@ -170,7 +170,7 @@ (define expat/fixed
                             "/expat-" version ".tar.xz")))
                 (sha256
                  (base32
-                  "0y95yg7y0hb53ddljdzllg1w64xi5k8xd3531n98ffn6rp3qzbzj")))))))
+                  "0zbss0dssn17mjmvk17qfi5cmvm0lcyzs62cwvqr219hhl864xcq")))))))
 
 (define-public libebml
   (package
-- 
2.34.0

Added tag(s) security. Request was from Ludovic Courtès <ludo@gnu.org> to control@debbugs.gnu.org. (Wed, 16 Mar 2022 20:34:02 GMT) (full text, mbox, link).

Information forwarded to guix-patches@gnu.org:
bug#54414; Package guix-patches. (Wed, 16 Mar 2022 20:35:02 GMT) (full text, mbox, link).

Message #10 received at 54414@debbugs.gnu.org (full text, mbox, reply):

Hi Leo,

Leo Famulari <leo@famulari.name> skribis:

> This fixes some regressions in 2.4.5 and 2.4.6:
>
> https://www.xml.com/news/2022-02-expat-246/
> https://www.xml.com/news/2022-03-expat-247/
>
> * gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.

LGTM, thanks!

Ludo’.

Reply sent to Leo Famulari <leo@famulari.name>:
You have taken responsibility. (Wed, 16 Mar 2022 21:19:01 GMT) (full text, mbox, link).

Notification sent to Leo Famulari <leo@famulari.name>:
bug acknowledged by developer. (Wed, 16 Mar 2022 21:19:01 GMT) (full text, mbox, link).

Message #15 received at 54414-done@debbugs.gnu.org (full text, mbox, reply):

On Wed, Mar 16, 2022 at 09:34:09PM +0100, Ludovic Courtès wrote:
> Hi Leo,
> 
> Leo Famulari <leo@famulari.name> skribis:
> 
> > This fixes some regressions in 2.4.5 and 2.4.6:
> >
> > https://www.xml.com/news/2022-02-expat-246/
> > https://www.xml.com/news/2022-03-expat-247/
> >
> > * gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.
> 
> LGTM, thanks!

Thanks for looking! I just pushed it as
69d3896c0fdc4791a45459f9bd005e6397d79805

bug archived. Request was from Debbugs Internal Request <help-debbugs@gnu.org> to internal_control@debbugs.gnu.org. (Thu, 14 Apr 2022 11:24:05 GMT) (full text, mbox, link).

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Mon Dec 30 17:39:27 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.