Subject: bug#62380: closed (Re: bug#62380: [staging PATCH 0/4] Update hdf5.)

From: [email-masked] (GNU bug Tracking System)
Date: Fri, 31 Mar 2023 03:28:02 +0000

Your bug report

#62380: [staging PATCH 0/4] Update hdf5.

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
62380: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62380
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#62380: [staging PATCH 0/4] Update hdf5.
From: Maxim Cournoyer <[email-masked]>
To: Greg Hogan <[email-masked]>
Cc: [email-masked]
Date: Thu, 30 Mar 2023 23:27:01 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

Hello,

I've installed the series to staging.  It seems it could have also been
on the limit to go to master, so in the future feel free to submit for
master.

Something we should look into is hide the (false positive, I assume?)
CVEs reported by guix lint:

--8<---------------cut here---------------start------------->8---
gnu/packages/maths.scm:1390:2: [email-masked]: probably vulnerable to CVE-2020-10809, CVE-2020-10810, CVE-2020-10811, CVE-2020-10812
gnu/packages/maths.scm:1515:2: [email-masked]: probably vulnerable to CVE-2020-10809, CVE-2020-10810, CVE-2020-10811, CVE-2020-10812
gnu/packages/maths.scm:1535:2: [email-masked]: probably vulnerable to CVE-2021-37501
--8<---------------cut here---------------end--------------->8---

This can be done by adding lint-hidden-cve properties, with explanatory comments.

-- 
Thanks,
Maxim

Subject: [staging PATCH 0/4] Update hdf5.
From: Greg Hogan <[email-masked]>
To: [email-masked]
Cc: Greg Hogan <[email-masked]>
Date: Wed, 22 Mar 2023 13:55:14 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

Greg Hogan (4):
  gnu: [email-masked]: Update to 1.8.23.
  gnu: [email-masked]: Update to 1.10.9.
  gnu: [email-masked]: Update to 1.12.2.
  gnu: Add [email-masked].

 gnu/packages/maths.scm | 32 ++++++++++++++++++++++++++------
 1 file changed, 26 insertions(+), 6 deletions(-)

-- 
2.40.0