From unknown Tue Jun 24 13:52:59 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#28703 <28703@debbugs.gnu.org> To: bug#28703 <28703@debbugs.gnu.org> Subject: Status: [PATCH] gnu: curl: Update replacement to 7.56.0. [security fixes] Reply-To: bug#28703 <28703@debbugs.gnu.org> Date: Tue, 24 Jun 2025 20:52:59 +0000 retitle 28703 [PATCH] gnu: curl: Update replacement to 7.56.0. [security fi= xes] reassign 28703 guix-patches submitter 28703 Kei Kebreau severity 28703 normal tag 28703 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Oct 04 11:25:08 2017 Received: (at submit) by debbugs.gnu.org; 4 Oct 2017 15:25:09 +0000 Received: from localhost ([127.0.0.1]:49078 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzlXo-0004xp-Lu for submit@debbugs.gnu.org; Wed, 04 Oct 2017 11:25:08 -0400 Received: from eggs.gnu.org ([208.118.235.92]:41055) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzlXm-0004xI-Li for submit@debbugs.gnu.org; Wed, 04 Oct 2017 11:25:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzlXg-0007oQ-GV for submit@debbugs.gnu.org; Wed, 04 Oct 2017 11:25:01 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:47977) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dzlXg-0007oH-DM for submit@debbugs.gnu.org; Wed, 04 Oct 2017 11:25:00 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:60251) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzlXf-0004Rw-7v for guix-patches@gnu.org; Wed, 04 Oct 2017 11:25:00 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzlXb-0007io-9O for guix-patches@gnu.org; Wed, 04 Oct 2017 11:24:59 -0400 Received: from mout02.posteo.de ([185.67.36.66]:52276) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dzlXb-0007gK-1q for guix-patches@gnu.org; Wed, 04 Oct 2017 11:24:55 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id 823FD209CB for ; Wed, 4 Oct 2017 17:24:51 +0200 (CEST) Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 3y6fpT2tJXz10HY; Wed, 4 Oct 2017 17:24:49 +0200 (CEST) From: Kei Kebreau To: guix-patches@gnu.org, 28702@debbugs.gnu.org Subject: [PATCH] gnu: curl: Update replacement to 7.56.0. [security fixes] Date: Wed, 4 Oct 2017 11:24:27 -0400 Message-Id: <20171004152427.14012-1-kkebreau@posteo.net> X-Mailer: git-send-email 2.14.2 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit Cc: Kei Kebreau X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Fixes CVE-2017-1000254. See for details. * gnu/packages/curl.scm (curl)[replacement]: Update to 7.56.0. (curl-7.55.0): Rename to ... (curl-7.56.0): ... this. [arguments]: Remove 'fix-Makefile' phase. --- gnu/packages/curl.scm | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm index 23606b481..ef1b6c74b 100644 --- a/gnu/packages/curl.scm +++ b/gnu/packages/curl.scm @@ -42,7 +42,7 @@ (define-public curl (package (name "curl") - (replacement curl-7.55.0) + (replacement curl-7.56.0) (version "7.54.1") (source (origin (method url-fetch) @@ -123,28 +123,15 @@ tunneling, and so on.") "See COPYING in the distribution.")) (home-page "https://curl.haxx.se/"))) -(define-public curl-7.55.0 +(define-public curl-7.56.0 (package (inherit curl) - (version "7.55.0") + (version "7.56.0") (source (origin (method url-fetch) (uri (string-append "https://curl.haxx.se/download/curl-" version ".tar.xz")) - (patches (search-patches "curl-bounds-check.patch")) (sha256 (base32 - "1785vxi0jamiv9d1wr1l45g0fm9ircxdfyfzf7ld8zv0z0i8bmfd")))) - (arguments - `(,@(substitute-keyword-arguments (package-arguments curl) - ((#:phases phases) - `(modify-phases ,phases - (add-before 'install 'fix-Makefile - ;; Fix a regression in 7.55.0 where docs are not installed. - ;; https://github.com/curl/curl/commit/a7bbbb7c368c6096802007f61f19a02e9d75285b - (lambda _ - (substitute* "Makefile" - (("install-data-hook:\n") - "install-data-hook:\n\tcd docs/libcurl && $(MAKE) install\n")) - #t))))))))) + "0wni3zkw7jyrwgwkqnrkf2x2b7c78wsp7p4z6a246hz9l367nhrj")))))) -- 2.14.2 From debbugs-submit-bounces@debbugs.gnu.org Wed Oct 04 12:37:53 2017 Received: (at 28703-done) by debbugs.gnu.org; 4 Oct 2017 16:37:53 +0000 Received: from localhost ([127.0.0.1]:49129 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzmgC-0006iQ-QD for submit@debbugs.gnu.org; Wed, 04 Oct 2017 12:37:52 -0400 Received: from mout02.posteo.de ([185.67.36.66]:45525) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dzmgA-0006i9-Gv for 28703-done@debbugs.gnu.org; Wed, 04 Oct 2017 12:37:51 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id 57B7320BD4 for <28703-done@debbugs.gnu.org>; Wed, 4 Oct 2017 18:37:43 +0200 (CEST) Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 3y6hQZ1YH4zyrG for <28703-done@debbugs.gnu.org>; Wed, 4 Oct 2017 18:37:39 +0200 (CEST) From: Kei Kebreau To: 28703-done@debbugs.gnu.org Subject: Re: [bug#28703] [PATCH] gnu: curl: Update replacement to 7.56.0. [security fixes] References: <20171004152427.14012-1-kkebreau@posteo.net> Date: Wed, 04 Oct 2017 12:37:13 -0400 In-Reply-To: <20171004152427.14012-1-kkebreau@posteo.net> (Kei Kebreau's message of "Wed, 4 Oct 2017 11:24:27 -0400") Message-ID: <87376yzx6u.fsf@posteo.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: -5.1 (-----) X-Debbugs-Envelope-To: 28703-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.1 (-----) --=-=-= Content-Type: text/plain Unintentional duplicate of bug #28702. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEg7ZwOtzKO2lLzi2m5qXuPBlGeg0FAlnVDjkACgkQ5qXuPBlG eg1csA/8DqIKlcpRuE5TSL0Q1d5oz5/nEeAa36b70/+9qa/kycB0yfyVyVRxpwVl SuKEuziIMsOmua945oQXB8MrmLIMDEtnYeBS6FPYdDOB6J7y6Mkalb761H6KnBtM x9vdrVuhr1QcE/P1Y3MM3FgMG+xwTNqXb2WGC3zcp4L7N+vpUIVOmECj8IyEx1jm IlqrAw98AqvadCn3rbobterDNvUGxjuSX5vWd/ibLj2QpJsOjrPmjSo21PVHHwjA xxGauHiXhhEeDsfTR+Ef9zK0ECTSKwhDd+eflssuopgdAYDi0St1w+V7l0WBpLty Y4VNnAZVulFxM6/pKR+h+0ODeowOpUMYUI7ow+stsKuQxk6eViHGhFkbAoLrLPsg 4PbDVpMHml4s6Xt2P3o6Oaxb/NFmcWjUlAIVT5/1j+SG0YPCFmHin4zey8e2qLTU dY+re2EVPykU3JmLHoZCIOYOT5NSXKv/Xr4oldIDYz0g/MnFVBTpwBXnr9iJJE+I ItwCrTE4z5O6RK7XGWjFCkDLq4DdEWJqwxOv3O/yOdVF8Ap9Eapj5iLhOFl8Vfc7 W5QNmYpFKx3HFCAqHvAra5bA5l7J9aA7bxOpcMYEPi85xQJctTV533VArQO+2pJs ts8WmL8+D0YklKTQoygTglMtthrawfJJC3jMpGwb14x7gkzkB1M= =TWD7 -----END PGP SIGNATURE----- --=-=-=-- From unknown Tue Jun 24 13:52:59 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 02 Nov 2017 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator