From unknown Tue Aug 19 21:04:23 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#32134 <32134@debbugs.gnu.org> To: bug#32134 <32134@debbugs.gnu.org> Subject: Status: [PATCH] gnu: curl: Update replacement to 7.61.0 [fixes CVE-2018-0500]. Reply-To: bug#32134 <32134@debbugs.gnu.org> Date: Wed, 20 Aug 2025 04:04:23 +0000 retitle 32134 [PATCH] gnu: curl: Update replacement to 7.61.0 [fixes CVE-20= 18-0500]. reassign 32134 guix-patches submitter 32134 Leo Famulari severity 32134 normal tag 32134 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 12 10:43:06 2018 Received: (at submit) by debbugs.gnu.org; 12 Jul 2018 14:43:06 +0000 Received: from localhost ([127.0.0.1]:57230 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdcoD-0003P5-Pb for submit@debbugs.gnu.org; Thu, 12 Jul 2018 10:43:05 -0400 Received: from eggs.gnu.org ([208.118.235.92]:33787) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdcoC-0003Ob-22 for submit@debbugs.gnu.org; Thu, 12 Jul 2018 10:43:04 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fdco5-0004Or-Ja for submit@debbugs.gnu.org; Thu, 12 Jul 2018 10:42:58 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:32784) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fdco5-0004OE-GC for submit@debbugs.gnu.org; Thu, 12 Jul 2018 10:42:57 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:52985) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fdco4-00063i-CG for guix-patches@gnu.org; Thu, 12 Jul 2018 10:42:57 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fdcnz-0004Am-78 for guix-patches@gnu.org; Thu, 12 Jul 2018 10:42:56 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:48161) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fdcnz-00049g-2C for guix-patches@gnu.org; Thu, 12 Jul 2018 10:42:51 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 8CA4C21B76; Thu, 12 Jul 2018 10:42:50 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Thu, 12 Jul 2018 10:42:50 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:message-id:subject:to:x-me-sender:x-me-sender :x-sasl-enc; s=mesmtp; bh=C8ICtv17qGPWD/E13YOwQyGhlYw8yfeCtofKpm 4GNn4=; b=ShxZV6FdQB42lTlehq20b7TA+Y7OGtxXzCw4bo2+a8wQ4NPad4hAz3 CRhsmy2Du8G3ouc/MDryKejrdx1q87s9LNJgPqZ08JwYv8pg09W2pdfnwLHWYApY syZxxYKk9rhIqzr/WNPijAxmq5D4w0CGO4u0Ul1xPE5VGUsvpGtm8= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=date:from:message-id:subject:to :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=C8ICtv17qGPWD/E13 YOwQyGhlYw8yfeCtofKpm4GNn4=; b=sXAD58brxWbUTJ6mF5AcJitpRmQWsGfLN TO6LI6otSwnd4EdjkA7+QXTzehx6RlvxPPv0+iCWlP0b7VtlxVDPjIn3UOX0hKwE JYkiKTHDHG57Eeh57RfS72RX7MP5U1gALJcQUnKDchM93R4nDD0vX4PVE12m5jco HCqlHM4F1VRajO3N55cgxVVNxph9caA08OcaaE+8Ie1dd0Jz/ax1mBCkM7DKmGhT mB41NnO/x+Q9sBE5Xea9sK8wH8E1oTHllJZMe8M8DvPGNJqfrSRgoNeMX+uJmBIR pYZTHykMjcAvT84Uw2+sdZo9qLbIhHTglJNu7ReKudd1Usc2OVwUQ== X-ME-Proxy: X-ME-Sender: Received: from jasmine.lan (c-76-124-202-137.hsd1.pa.comcast.net [76.124.202.137]) by mail.messagingengine.com (Postfix) with ESMTPA id 075B11028D for ; Thu, 12 Jul 2018 10:42:49 -0400 (EDT) From: Leo Famulari To: guix-patches@gnu.org Subject: [PATCH] gnu: curl: Update replacement to 7.61.0 [fixes CVE-2018-0500]. Date: Thu, 12 Jul 2018 10:42:46 -0400 Message-Id: X-Mailer: git-send-email 2.18.0 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.1 (-----) * gnu/packages/curl.scm (curl)[replacement]: Update to 7.61.0. (curl-7.60.0): Replace with ... (curl-7.61.0): ... new variable. --- gnu/packages/curl.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm index 65bc69838..e724fd147 100644 --- a/gnu/packages/curl.scm +++ b/gnu/packages/curl.scm @@ -51,7 +51,7 @@ (package (name "curl") (version "7.59.0") - (replacement curl-7.60.0) + (replacement curl-7.61.0) (source (origin (method url-fetch) (uri (string-append "https://curl.haxx.se/download/curl-" @@ -141,10 +141,10 @@ tunneling, and so on.") "See COPYING in the distribution.")) (home-page "https://curl.haxx.se/"))) -(define-public curl-7.60.0 +(define-public curl-7.61.0 (package (inherit curl) - (version "7.60.0") + (version "7.61.0") (source (origin (method url-fetch) @@ -152,7 +152,7 @@ tunneling, and so on.") version ".tar.xz")) (sha256 (base32 - "1876ck0smbqz3xakm7s6q6gh4zarh9pv3izf4vlzgpc9xn6zydl7")))))) + "080p9r2kln8cbfj0rqfn6wqp5kdn9k5wp720nirkcw845lcmavpg")))))) (define-public kurly (package -- 2.18.0 From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 12 14:41:29 2018 Received: (at 32134) by debbugs.gnu.org; 12 Jul 2018 18:41:29 +0000 Received: from localhost ([127.0.0.1]:57346 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdgWv-0002ea-5U for submit@debbugs.gnu.org; Thu, 12 Jul 2018 14:41:29 -0400 Received: from wout4-smtp.messagingengine.com ([64.147.123.20]:46137) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdgWu-0002eT-0h for 32134@debbugs.gnu.org; Thu, 12 Jul 2018 14:41:28 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.west.internal (Postfix) with ESMTP id D510B2CF; Thu, 12 Jul 2018 14:41:26 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Thu, 12 Jul 2018 14:41:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.com; h= content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; bh=96m7JrdI8MuYvmxgCS2Gx8YbszAADnDz9maR1jiGDJA=; b=ezlPmUR+ asDu5/ZptjmroA4HKkdlUnjHDEWZDvc+KwE8Su6guFvVKkNWblemT4aH6GgBjQbi 1lfRXghW6z19K0+3nxChI+jcXJh8b6F6Q25oovHi0mNQ4dbWSUczFn6uL0Ygp1K6 4eU2u9u+s5voGupFwVas5zpucHw4ed6tlt5Vh8BPQLUDvvaGT0EOEa9p+u/WNxpd L6RCwzXvcfOUDZiiTqc9QfH37XS3PfD9i6GRIXM6F4YCzkAtGgtiR3VpmWUvIGIh gkplmL1qxSio8J8n6p1TRMTYplPhakUQaVMfB63Ie2b5VvWEB15NEzgzvvlzPKE2 dJhlBjHY1GwWmA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=96m7JrdI8MuYvmxgCS2Gx8YbszAAD nDz9maR1jiGDJA=; b=KGvx3kENSX/uyoIeu3N9g+eMTgBogqTEdl8KolVozUUsB Qll7Ar2pXXD5rzDL7Tp/a+8ICbTQBTF+v5I7m5r3rVenz47qOawzL0x8FLfgtEzD 4O2/1J6i0sDEP0qHw6VP0zT1OsZXz9FGcgGaKdDMTZs6HaCq7djZ3s4vUWze73AZ 8XMAG8sh9lQjwNvsjdv2XE6D7sKmeVwpGf6S4ImfC3jlKfeXfjCDNkkIxuD2hzsh 1iRTy3gL/AweWfRucpzVCDIkKpdCJzfzXXMRwp8S+Yv6wM693v2pFsN5BUG8J5mS SHmVgJhtwHKVNVDWyRYWZBqkJLc1UyNgCV4uqndyA== X-ME-Proxy: X-ME-Sender: Received: from localhost (95.92-221-151.customer.lyse.net [92.221.151.95]) by mail.messagingengine.com (Postfix) with ESMTPA id C264A10268; Thu, 12 Jul 2018 14:41:25 -0400 (EDT) From: Marius Bakke To: Leo Famulari , 32134@debbugs.gnu.org Subject: Re: [bug#32134] [PATCH] gnu: curl: Update replacement to 7.61.0 [fixes CVE-2018-0500]. In-Reply-To: References: User-Agent: Notmuch/0.27 (https://notmuchmail.org) Emacs/26.1 (x86_64-pc-linux-gnu) Date: Thu, 12 Jul 2018 20:41:23 +0200 Message-ID: <87y3eg70vg.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 32134 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) --=-=-= Content-Type: text/plain Leo Famulari writes: > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.61.0. > (curl-7.60.0): Replace with ... > (curl-7.61.0): ... new variable. LGTM, thanks! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAltHoNMACgkQoqBt8qM6 VPoSVwgAkWYaB8dLxe2HA89bBReAxO60gEg64xT4ZRlujw+d7VGrv64fUCS3E7e/ qIeN2tINMFYPSazGZfb79cJ4AqvwWANLz7999JCkGG19ie4c9aXEx/xR0ObBuKXS lD4Gm1SW5Itl12rdIgRBHTQaKAXiukUzxCwpsqBW6UC+m/eSfgXeuPn1XPfqxqVO yvYhZg4aHe12Ii0vZZOQLQx5bjB96GKSnJlYqdShvFfC58n2hHObY92yk+69PPZE lsRP6VCVI/WdclbYc7pcz3uB9WdA3eeOeHiJ/bm0I3IFxApifjTtbShKXmcQTPd4 FHhbwb0IGayJgXEhPo0gf5t2ffww3w== =Dwmw -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 12 18:52:00 2018 Received: (at 32134-done) by debbugs.gnu.org; 12 Jul 2018 22:52:00 +0000 Received: from localhost ([127.0.0.1]:57525 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdkRM-0002Gi-MI for submit@debbugs.gnu.org; Thu, 12 Jul 2018 18:52:00 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:37709) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fdkRK-0002GZ-Lq for 32134-done@debbugs.gnu.org; Thu, 12 Jul 2018 18:51:59 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 5895521B1B; Thu, 12 Jul 2018 18:51:58 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Thu, 12 Jul 2018 18:51:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=DBldDlf90vmuam6cOA0/FSjghJd2n05Z9CzuSUMtthQ=; b=Qk1F8 M9la7J2G0KXh1r+Exzz1qDYhzXhvnwX3ge9X10x2X/0bHsYpTGtwWuT01JTCVRDh crRaF+bmtmTFbqCe+ffoNYtdYCKlHMb2w8GVOkRTMOZ7z+J1ZpfIRW50/fXh/R1t d38jnehE3Ig+0QXNL1K4tt2rIy6OG4k/SYaPlE= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=DBldDlf90vmuam6cOA0/FSjghJd2n 05Z9CzuSUMtthQ=; b=Heg8HwXAZNrPKZ35nzI1460nWRhfXtphy92IYzHfxBW2f G8A3yUQwMR47vFkRc9zJ5Xw3S3ScMNQhiYLPJyzMkr9YR3z6oygOpmbSW+62d81y md5J5/AVLufLdCZgCIHFBl+qs127srRpXfO8ouvzEftOUKD6A0lIXWW1PKIviRyz XdDcusTZqNVrGUqmub2wT4FWF3rtU5MXuRe5FCV8RvToCfjReVqZKysX45K5OCEM XOt4n+Y2t8OHCwYpSjNIGlt+zf2FGWYUyH6XocXtUd4lmaosD0DR53hd5lavZKC2 C8FLa8W98BFz+9QjbqcWWnw7TqVy74byqqPW/1W0g== X-ME-Proxy: X-ME-Sender: Received: from localhost (unknown [172.58.201.94]) by mail.messagingengine.com (Postfix) with ESMTPA id C3BE1E410A; Thu, 12 Jul 2018 18:51:57 -0400 (EDT) Date: Thu, 12 Jul 2018 18:51:56 -0400 From: Leo Famulari To: Marius Bakke Subject: Re: [bug#32134] [PATCH] gnu: curl: Update replacement to 7.61.0 [fixes CVE-2018-0500]. Message-ID: <20180712225156.GA8727@jasmine.lan> References: <87y3eg70vg.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="4Ckj6UjgE2iN1+kY" Content-Disposition: inline In-Reply-To: <87y3eg70vg.fsf@fastmail.com> User-Agent: Mutt/1.10.0 (2018-05-17) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 32134-done Cc: 32134-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) --4Ckj6UjgE2iN1+kY Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jul 12, 2018 at 08:41:23PM +0200, Marius Bakke wrote: > Leo Famulari writes: >=20 > > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.61.0. > > (curl-7.60.0): Replace with ... > > (curl-7.61.0): ... new variable. >=20 > LGTM, thanks! Thanks! Pushed as b11844034d772f3eba71664f77aebbb69a353790 --4Ckj6UjgE2iN1+kY Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAltH24wACgkQJkb6MLrK fwjuxxAAlHKFm/zMja2q1lKQqoI9DDsHo7lwmH+Vor8BO4HdrdCewcAg5HZZ3Rhg bkITd09dNbK14cyoxh1X8qdPpAXwsd/a2JDmeCgFC2gnrG74Ypcya7zgI6m24ng1 TKsOXfsNhRuMk/85ZF0qAcwvh9aFBMa9oZTdZxe7+ojfS0NHVzWgVbzI8UPsOCJa J9JRptwoJxYV4kjr5vkyDn72bVfm8F6mb0peYCgq0ZKp5lHIhHUfzaRExF4MVq9h 6aMG6PQDfdooWOpJDC/+1AsAhJOf7xLsya/GNBAvjZ8OcV+A3TifSEwqVK/gX187 2EOdHBptNFlO8hKTqFHKK/Kkq1Zhfefh8uyAcDfZUOvHyvBsvS5OozgVbe9C13it AiFzeuFpm0lcWmCIh7rnlw8c1pzSC0xuj+bPlEhBx53wIeeECXZfBaLWImFzRdqz GpBGZOVpD9+75Q/0R5wHD9Vwr5VmrAvSjPVydNU25ksiZeJzeQ4nCwEwgtUuR7nC tms8SaPBD+ZNsWB5k5tOgaf77u68IMCD1vPMJjWZ4jlHp92q3P5syfREasOj5vLi TSNxzeCcVjN8nV5rZVs1Uplkj1pLIdA85FmQZ/M2o7g8bADaK11i1IjrVhwkVKQL DL9lsRT8nS8Kfgn3w0m/47U3a2kdcc2TbEnMqzKwi9dmhIm6dMo= =dh/z -----END PGP SIGNATURE----- --4Ckj6UjgE2iN1+kY-- From unknown Tue Aug 19 21:04:23 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 10 Aug 2018 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator