GNU bug report logs - #54414
[SECURITY] gnu: expat: Update to 2.4.7.

Previous Next

Package: guix-patches;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Wed, 16 Mar 2022 00:15:02 UTC

Severity: normal

Tags: security

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 54414 in the body.
You can then email your comments to 54414 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#54414; Package guix-patches. (Wed, 16 Mar 2022 00:15:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Leo Famulari <leo <at> famulari.name>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Wed, 16 Mar 2022 00:15:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: [SECURITY] gnu: expat: Update to 2.4.7.
Date: Tue, 15 Mar 2022 20:14:39 -0400
This fixes some regressions in 2.4.5 and 2.4.6:

https://www.xml.com/news/2022-02-expat-246/
https://www.xml.com/news/2022-03-expat-247/

* gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.
---
 gnu/packages/xml.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm
index 3ce5e771c7..49275c3e0c 100644
--- a/gnu/packages/xml.scm
+++ b/gnu/packages/xml.scm
@@ -158,7 +158,7 @@ (define-public expat
 (define expat/fixed
   (package
     (inherit expat)
-    (version "2.4.5")
+    (version "2.4.7")
     (source (let ((dot->underscore (lambda (c) (if (char=? #\. c) #\_ c))))
               (origin
                 (method url-fetch)
@@ -170,7 +170,7 @@ (define expat/fixed
                             "/expat-" version ".tar.xz")))
                 (sha256
                  (base32
-                  "0y95yg7y0hb53ddljdzllg1w64xi5k8xd3531n98ffn6rp3qzbzj")))))))
+                  "0zbss0dssn17mjmvk17qfi5cmvm0lcyzs62cwvqr219hhl864xcq")))))))
 
 (define-public libebml
   (package
-- 
2.34.0





Added tag(s) security. Request was from Ludovic Courtès <ludo <at> gnu.org> to control <at> debbugs.gnu.org. (Wed, 16 Mar 2022 20:34:02 GMT) Full text and rfc822 format available.

Information forwarded to guix-patches <at> gnu.org:
bug#54414; Package guix-patches. (Wed, 16 Mar 2022 20:35:02 GMT) Full text and rfc822 format available.

Message #10 received at 54414 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Leo Famulari <leo <at> famulari.name>
Cc: 54414 <at> debbugs.gnu.org
Subject: Re: bug#54414: [SECURITY] gnu: expat: Update to 2.4.7.
Date: Wed, 16 Mar 2022 21:34:09 +0100
Hi Leo,

Leo Famulari <leo <at> famulari.name> skribis:

> This fixes some regressions in 2.4.5 and 2.4.6:
>
> https://www.xml.com/news/2022-02-expat-246/
> https://www.xml.com/news/2022-03-expat-247/
>
> * gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.

LGTM, thanks!

Ludo’.




Reply sent to Leo Famulari <leo <at> famulari.name>:
You have taken responsibility. (Wed, 16 Mar 2022 21:19:01 GMT) Full text and rfc822 format available.

Notification sent to Leo Famulari <leo <at> famulari.name>:
bug acknowledged by developer. (Wed, 16 Mar 2022 21:19:01 GMT) Full text and rfc822 format available.

Message #15 received at 54414-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 54414-done <at> debbugs.gnu.org
Subject: Re: bug#54414: [SECURITY] gnu: expat: Update to 2.4.7.
Date: Wed, 16 Mar 2022 17:18:44 -0400
On Wed, Mar 16, 2022 at 09:34:09PM +0100, Ludovic Courtès wrote:
> Hi Leo,
> 
> Leo Famulari <leo <at> famulari.name> skribis:
> 
> > This fixes some regressions in 2.4.5 and 2.4.6:
> >
> > https://www.xml.com/news/2022-02-expat-246/
> > https://www.xml.com/news/2022-03-expat-247/
> >
> > * gnu/packages/xml.scm (expat/fixed): Update to 2.4.7.
> 
> LGTM, thanks!

Thanks for looking! I just pushed it as
69d3896c0fdc4791a45459f9bd005e6397d79805




bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 14 Apr 2022 11:24:05 GMT) Full text and rfc822 format available.

This bug report was last modified 3 years and 124 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.