From debbugs-submit-bounces@debbugs.gnu.org Wed Jul 19 22:22:51 2017 Received: (at submit) by debbugs.gnu.org; 20 Jul 2017 02:22:51 +0000 Received: from localhost ([127.0.0.1]:48384 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dY175-0007UT-Kf for submit@debbugs.gnu.org; Wed, 19 Jul 2017 22:22:51 -0400 Received: from eggs.gnu.org ([208.118.235.92]:35938) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dY173-0007UG-9F for submit@debbugs.gnu.org; Wed, 19 Jul 2017 22:22:50 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dY16x-0005CR-2a for submit@debbugs.gnu.org; Wed, 19 Jul 2017 22:22:44 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:52472) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dY16w-0005CH-Us for submit@debbugs.gnu.org; Wed, 19 Jul 2017 22:22:42 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:55141) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dY16v-0006sA-US for guix-patches@gnu.org; Wed, 19 Jul 2017 22:22:42 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dY16r-00059v-G0 for guix-patches@gnu.org; Wed, 19 Jul 2017 22:22:41 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:42805) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dY16r-00058d-90 for guix-patches@gnu.org; Wed, 19 Jul 2017 22:22:37 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 8B22420866; Wed, 19 Jul 2017 22:22:33 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Wed, 19 Jul 2017 22:22:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:message-id:subject:to:x-me-sender:x-me-sender :x-sasl-enc:x-sasl-enc; s=mesmtp; bh=9XKDucSRQ38TTNVr7HJASCRBt9o lD0B3KWZvsaU0rts=; b=wK51vUH5cRgqm96A9B/gFig9Gj7vle5qko+NlwKHhCY AlMxv1BoBtcaCyJXORHnF6NTDaksMKOzdMIySvDy0mZ8SMLfFF1thKiFXGohjiin SUMlUawK0ptKDx4FEks75Dlo/Esu2iO6a7bNeSY6Zz8jNnFS3Kr230EewB+bb4Us = DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=date:from:message-id:subject:to :x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=9XKDuc SRQ38TTNVr7HJASCRBt9olD0B3KWZvsaU0rts=; b=F6kX2PZxQAgOalEvDi6MJO HjpMDZqDkw5po8x2+ypqNSPULdFAVgvQ6NaPU6HY+iNSFr+AdhrSjUya3H7P/9Zi wTlsPGA0brEX4CJ3EWxK8LVXA863QN203lOR+8oSNFCHM6wtAV7lQvv2wgn0OrXg qPwUYJFf2+DSVUw+YU/i5RDvDeFU73Q2sj8wSFVYDHSp08+Lp0r/cXSvElk2Mqvm pTfHDtfTqqoVLWlD3SAZ/WGZAWkttuITSgqIvK4weoT8eeyL8AhjuA2DBHpFVJeP +PpvEnF7/TXeWHtqqJjkB27SFxo4GVko2SQh/a9eVLKu4DfNP0QFy2Z02seAdsHQ == X-ME-Sender: X-Sasl-enc: 1g7yDE3TB/hlFAXxrvdzfvN60stVP0IPJLGjf7i4TZxG 1500517353 Received: from jasmine.lan (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 471822418A for ; Wed, 19 Jul 2017 22:22:33 -0400 (EDT) From: Leo Famulari To: guix-patches@gnu.org Subject: [PATCH] gnu: pcre: Update replacement to 8.41 [fixes CVE-2017-{7244, 7245, 7246}]. Date: Wed, 19 Jul 2017 22:22:28 -0400 Message-Id: <47b5258899cf05aea85ef2af8a9e15207830cbb9.1500517348.git.leo@famulari.name> X-Mailer: git-send-email 2.13.3 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) * gnu/packages/pcre.scm (pcre)[replacement]: Update to pcre-8.41. (pcre/fixed): Replace with ... (pcre-8.41): ... new variable. --- gnu/packages/pcre.scm | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/gnu/packages/pcre.scm b/gnu/packages/pcre.scm index 67a8db1c7..8dd509931 100644 --- a/gnu/packages/pcre.scm +++ b/gnu/packages/pcre.scm @@ -34,7 +34,7 @@ (package (name "pcre") (version "8.40") - (replacement pcre/fixed) + (replacement pcre-8.41) (source (origin (method url-fetch) (uri (list @@ -72,12 +72,20 @@ POSIX regular expression API.") (license license:bsd-3) (home-page "http://www.pcre.org/"))) -(define pcre/fixed +(define pcre-8.41 (package (inherit pcre) + (version "8.41") (source (origin - (inherit (package-source pcre)) - (patches (search-patches "pcre-CVE-2017-7186.patch")))))) + (method url-fetch) + (uri (list (string-append "mirror://sourceforge/pcre/pcre/" + version "/pcre-" version ".tar.bz2") + (string-append "ftp://ftp.csx.cam.ac.uk" + "/pub/software/programming/pcre/" + "pcre-" version ".tar.bz2"))) + (sha256 + (base32 + "0c5m469p5pd7jip621ipq6hbgh7128lzh7xndllfgh77ban7wb76")))))) (define-public pcre2 (package -- 2.13.3 From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 20 04:35:41 2017 Received: (at 27769) by debbugs.gnu.org; 20 Jul 2017 08:35:41 +0000 Received: from localhost ([127.0.0.1]:48516 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dY6vs-0007uB-SI for submit@debbugs.gnu.org; Thu, 20 Jul 2017 04:35:41 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46990) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dY6vs-0007tx-7Y for 27769@debbugs.gnu.org; Thu, 20 Jul 2017 04:35:40 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dY6vi-00009D-A8 for 27769@debbugs.gnu.org; Thu, 20 Jul 2017 04:35:35 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:54187) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dY6vi-000098-6L; Thu, 20 Jul 2017 04:35:30 -0400 Received: from [193.50.110.220] (port=39262 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1dY6vh-0005y7-MN; Thu, 20 Jul 2017 04:35:30 -0400 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) To: Leo Famulari Subject: Re: [bug#27769] [PATCH] gnu: pcre: Update replacement to 8.41 [fixes CVE-2017-{7244, 7245, 7246}]. References: <47b5258899cf05aea85ef2af8a9e15207830cbb9.1500517348.git.leo@famulari.name> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 2 Thermidor an 225 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-unknown-linux-gnu Date: Thu, 20 Jul 2017 10:35:28 +0200 In-Reply-To: <47b5258899cf05aea85ef2af8a9e15207830cbb9.1500517348.git.leo@famulari.name> (Leo Famulari's message of "Wed, 19 Jul 2017 22:22:28 -0400") Message-ID: <878tjjzesv.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: 27769 Cc: 27769@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Leo Famulari skribis: > * gnu/packages/pcre.scm (pcre)[replacement]: Update to pcre-8.41. > (pcre/fixed): Replace with ... > (pcre-8.41): ... new variable. LGTM! > - (patches (search-patches "pcre-CVE-2017-7186.patch")))))) Should we remove this patch as well? For =E2=80=98core-updates=E2=80=99, I suggest we keep 8.41 it as a graft. = WDYT? Thank you! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 20 08:35:08 2017 Received: (at 27769-done) by debbugs.gnu.org; 20 Jul 2017 12:35:08 +0000 Received: from localhost ([127.0.0.1]:48695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dYAfc-0000SZ-MG for submit@debbugs.gnu.org; Thu, 20 Jul 2017 08:35:08 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:52939) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dYAfa-0000SR-MD for 27769-done@debbugs.gnu.org; Thu, 20 Jul 2017 08:35:07 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 1440820877; Thu, 20 Jul 2017 08:35:06 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Thu, 20 Jul 2017 08:35:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=rZRWArkrOxoBVXo2QjUUwtQjuS/wURZX5k7oi3 axAA0=; b=ovoy/zLekw8LpsaVEMNLEc2GVlJnHMMz184VmPBLtLSpTo+3MiQiby EH07JpCq79vPaYjOC2BdlWQVEmK1zRzx6xRqLl2dHbPIwmXrrGn/YL7Zl84U8Zzf HgI96Y8OWu6pWhEd4gKBKrL1VOkEPq3iTHb+ehV0O3Je+KFXzVLU8= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=rZRWArkrOxoBVXo2Qj UUwtQjuS/wURZX5k7oi3axAA0=; b=XNF4aJuyO1npheN8xpG3nf/nqp7S12rxQN Ow+GOcoWr9sqLiKwBS/Usg/sXKKaEa7LPx16kt5bYeOYz/cJkmMyMNzrdstTJ3Tv NU3Hzk5lUCj4hiTNT35MrVLfguQ3A+oOUibue1/7fFjdcb0a2evdgJHeOHeZOI0f dLoQjl8NFJ5yj0rPVcqAuLGNjMcRyQHgWGHG3xhn9x9oZ4ZK6gW2olWn7qvGLeZ2 tdEMRHNlV8YS8hjQqFKsEMAVtvm1NsXPMSmxDtogKiqUmCazmpbuYrfdkzDZa9Ps nCeeqqcQ1oByJtuw6YwNLMMg1g+M/95LtfWWy72Wy1Vifp5V+NGg== X-ME-Sender: X-Sasl-enc: XeT6XJ+il10tdBbIFyhK1M08QM4seWvqUvGxgmJ39itM 1500554105 Received: from localhost (unknown [172.58.225.98]) by mail.messagingengine.com (Postfix) with ESMTPA id A86AF7E1FC; Thu, 20 Jul 2017 08:35:05 -0400 (EDT) Date: Thu, 20 Jul 2017 08:34:23 -0400 From: Leo Famulari To: Ludovic =?iso-8859-1?Q?Court=E8s?= Subject: Re: [bug#27769] [PATCH] gnu: pcre: Update replacement to 8.41 [fixes CVE-2017-{7244, 7245, 7246}]. Message-ID: <20170720123423.GB29905@jasmine.lan> References: <47b5258899cf05aea85ef2af8a9e15207830cbb9.1500517348.git.leo@famulari.name> <878tjjzesv.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="gatW/ieO32f1wygP" Content-Disposition: inline In-Reply-To: <878tjjzesv.fsf@gnu.org> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27769-done Cc: 27769-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --gatW/ieO32f1wygP Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jul 20, 2017 at 10:35:28AM +0200, Ludovic Court=C3=A8s wrote: > > - (patches (search-patches "pcre-CVE-2017-7186.patch")))))) >=20 > Should we remove this patch as well? Yes! I was rushing to finish this at the end of the night and I sent a preliminary version of this change by mistake :/ > For =E2=80=98core-updates=E2=80=99, I suggest we keep 8.41 it as a graft.= WDYT? Agreed, I think we should not make any more big changes on that branch unless we have to. Pushed as 426b0b898f70a58133d80779980f163a5761686e. --gatW/ieO32f1wygP Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllwo08ACgkQJkb6MLrK fwh0FQ//X/a8WdP/ZNRoECUUtzFYln33T0qSPuN01pINeZV+gxLxt34labhZOmrj i3FZgnqoFC/mFzTZmo3zHrIcFjv3np9FMS2pa/7ZQMnGiKk4/8a/hj2YwLzzQnBh C04ccvNh+UjyjyLf0o1qpYPKCaRrk0vyKKTTHLJ8W8f5f3+qt1WeHY+KtvKa3Aag uzlQZbOpT1K/WKK/0PZz7BBucasT0yvu5No4d05dAYxmRx9o5EH4I+9m/3+r9EDP QKwOmwf4fTMBUzrLJVG8VzyGVTOSHmr/HpVfihFZLsNNASvm8Z3qIPSAHPwGl/FE Dp8k7mspFwtMmbewcTudWY5dra0Qy9e+wblhw6A+MU7XIy+wqLe7+N+KUTw2Mlfr LmfnQmrGwBmz+loR+cSugIHuQmbOEQHWHDkRu1mKNKHJ/VI92SU1eKjfSevl8QOK 2U3vMchz/6XhGGcZReB30DScBdTbSHmO3y/HEKhKOI7rOLhg+G+xcyM6UWvfdPV5 vTxEqZUF1H32ULrSYFGyStN7bZp9odS+sZOhGhW9yUrBARs55xFUo+aiZ2onKz2k gGEfwDtu+p6n4CMfJIFV7iF2uej2f2zIxZETn15GfDbKt2p496I/CH+Ab3+OC+Y6 BFvbpy3EasZopvlgGkU5WDRRe6K030rYiD03UypmT0amOQ5O1oU= =1mta -----END PGP SIGNATURE----- --gatW/ieO32f1wygP-- From unknown Mon Aug 18 02:38:46 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 18 Aug 2017 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator