GNU bug report logs - #32508
[PATCH] gnu: libx11: Replace with 1.6.6 [security fixes].

Previous Next

Package: guix-patches;

Reported by: Marius Bakke <mbakke <at> fastmail.com>

Date: Thu, 23 Aug 2018 15:01:01 UTC

Severity: normal

Tags: patch

Done: Marius Bakke <mbakke <at> fastmail.com>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: Marius Bakke <mbakke <at> fastmail.com>
Cc: 32508 <at> debbugs.gnu.org
Subject: [bug#32508] [PATCH] gnu: libx11: Replace with 1.6.6 [security fixes].
Date: Thu, 23 Aug 2018 16:20:33 -0400
[Message part 1 (text/plain, inline)]
On Thu, Aug 23, 2018 at 04:59:47PM +0200, Marius Bakke wrote:
> This fixes CVE-2018-14599, CVE-2018-14600, and CVE-2018-14598.
> 
> * gnu/packages/xorg.scm (libx11)[replacement]: New field.
> (libx11-1.6.6): New public variable.

Thanks!

> +;; Replacement package to fix multiple security bugs:
> +;; <http://seclists.org/oss-sec/2018/q3/146>.
> +(define-public libx11-1.6.6
> +  (package/inherit libx11

Does it need to use package/inherit? My understanding is that procedure
is primarily useful for packages that inherit from another package foo,
when foo is being grafted. For example, the current situation with
cups-minimal and cups.
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 6 years and 271 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.