GNU bug report logs - #32179
[PATCH] gnu: CUPS: Update to 2.2.8 [fixes CVE-2018-{4180,4181}].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 32179 in the body.
You can then email your comments to 32179 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: [PATCH] gnu: CUPS: Update to 2.2.8 [fixes CVE-2018-{4180,4181}].
Date: Mon, 16 Jul 2018 15:04:26 -0400

* gnu/packages/cups.scm (cups-minimal)[replacement]: New field.
(cups-minimal-2.2.8): New variable.
(cups): Use package/inherit.
---
 gnu/packages/cups.scm | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/cups.scm b/gnu/packages/cups.scm
index d36558702..bfc587a6f 100644
--- a/gnu/packages/cups.scm
+++ b/gnu/packages/cups.scm
@@ -174,6 +174,7 @@ filters for the PDF-centric printing workflow introduced by OpenPrinting.")
 (define-public cups-minimal
   (package
     (name "cups-minimal")
+    (replacement cups-minimal-2.2.8)
     (version "2.2.6")
     (source
      (origin
@@ -234,8 +235,21 @@ describe printer capabilities and features, and a wide variety of generic and
 device-specific programs to convert and print many types of files.")
     (license license:gpl2)))
 
+(define-public cups-minimal-2.2.8
+  (package
+    (inherit cups-minimal)
+    (version "2.2.8")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/apple/cups/releases/download/v"
+                           version "/cups-" version "-source.tar.gz"))
+       (sha256
+        (base32
+         "1r7r7b3nqpzc1a9dczqpj2mr8rkcwf01676v11sp4j7w4qfzqs1r"))))))
+
 (define-public cups
-  (package (inherit cups-minimal)
+  (package/inherit cups-minimal
     (name "cups")
     (arguments
      `(;; Three tests fail:
-- 
2.18.0

Message #8 received at 32179 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Leo Famulari <leo <at> famulari.name>
Cc: 32179 <at> debbugs.gnu.org
Subject: Re: [bug#32179] [PATCH] gnu: CUPS: Update to 2.2.8 [fixes
 CVE-2018-{4180, 4181}].
Date: Wed, 18 Jul 2018 00:14:03 +0200

Hi Leo,

Leo Famulari <leo <at> famulari.name> skribis:

> * gnu/packages/cups.scm (cups-minimal)[replacement]: New field.
> (cups-minimal-2.2.8): New variable.
> (cups): Use package/inherit.

LGTM, thank you!

Ludo’.

Message #15 received at 32179-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 32179-done <at> debbugs.gnu.org
Subject: Re: [bug#32179] [PATCH] gnu: CUPS: Update to 2.2.8 [fixes
 CVE-2018-{4180,4181}].
Date: Tue, 17 Jul 2018 20:46:07 -0400

[Message part 1 (text/plain, inline)]

On Wed, Jul 18, 2018 at 12:14:03AM +0200, Ludovic Courtès wrote:
> Hi Leo,
> 
> Leo Famulari <leo <at> famulari.name> skribis:
> 
> > * gnu/packages/cups.scm (cups-minimal)[replacement]: New field.
> > (cups-minimal-2.2.8): New variable.
> > (cups): Use package/inherit.
> 
> LGTM, thank you!

Thanks! Pushed as d212b9d4d0c42643d4e11965b8bf5649dcb24175

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.