GNU bug report logs - #48001
[PATCH] gnu: xorg-server: CVE-2021-3472.

Previous Next

Package: guix-patches;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Sat, 24 Apr 2021 19:40:02 UTC

Severity: normal

Tags: patch, security

Merged with 48039

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: 48001 <at> debbugs.gnu.org
Subject: [bug#48001] [PATCH] gnu: xorg-server: CVE-2021-3472.
Date: Sat, 24 Apr 2021 17:36:30 -0400
[Message part 1 (text/plain, inline)]
The first revision of this patch does not take care to avoid changing
the derivation of xorg-server-for-tests, so it would cause way too many
packages to be rebuilt.

Here is a revised patch that ensures the derivation remains the same.

For example:

------
$ guix build -e '(@@ (gnu packages xorg) xorg-server-for-tests)' --no-grafts -d                  
/gnu/store/nhs1c9q04g6k4prxxv4kb9q5lg1p872q-xorg-server-1.20.10.drv
$ ./pre-inst-env guix build -e '(@@ (gnu packages xorg) xorg-server-for-tests)' --no-grafts -d
/gnu/store/nhs1c9q04g6k4prxxv4kb9q5lg1p872q-xorg-server-1.20.10.drv
------
[0001-gnu-xorg-server-CVE-2021-3472.patch (text/plain, attachment)]
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 4 years and 76 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.