GNU bug report logs - #71124
[PATCH] gnu: skopeo: Update to 1.15.1 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 71124 in the body.
You can then email your comments to 71124 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tomas Volf <~@wolfsden.cz>
To: guix-patches <at> gnu.org
Cc: Tomas Volf <~@wolfsden.cz>
Subject: [PATCH] gnu: skopeo: Update to 1.15.1 [security fixes].
Date: Wed, 22 May 2024 20:47:55 +0200

This fixes CVE-2024-3727.

* gnu/packages/virtualization.scm (skopeo): Update to 1.15.1.

Change-Id: Icebb6f50e7317bce9ff106d71ad30dcfa6665666
---
 gnu/packages/virtualization.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm
index 34cccd6550..d45249455e 100644
--- a/gnu/packages/virtualization.scm
+++ b/gnu/packages/virtualization.scm
@@ -2258,7 +2258,7 @@ (define-public umoci
 (define-public skopeo
   (package
     (name "skopeo")
-    (version "1.15.0")
+    (version "1.15.1")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -2267,7 +2267,7 @@ (define-public skopeo
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "1f9n3ysdmll7vq8dmgpv03m8aqq3w9cfvbmxxpwmnv1nlfc67ihq"))))
+                "0fhw3jrbklpz7kb1kdwn2hg3v2jyyz30710wkd0wlpfz4fyzmzb6"))))
     (build-system gnu-build-system)
     (native-inputs
      (list go-1.21
-- 
2.41.0

Message #10 received at 71124-done <at> debbugs.gnu.org (full text, mbox):

From: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
To: Tomas Volf <~@wolfsden.cz>
Cc: 71124-done <at> debbugs.gnu.org
Subject: Re: [bug#71124] [PATCH] gnu: skopeo: Update to 1.15.1 [security
 fixes].
Date: Thu, 23 May 2024 13:32:19 +0800

[Message part 1 (text/plain, inline)]

Tomas Volf <~@wolfsden.cz> writes:

> This fixes CVE-2024-3727.
>
> * gnu/packages/virtualization.scm (skopeo): Update to 1.15.1.
>
> Change-Id: Icebb6f50e7317bce9ff106d71ad30dcfa6665666
> ---
>  gnu/packages/virtualization.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm
> index 34cccd6550..d45249455e 100644
> --- a/gnu/packages/virtualization.scm
> +++ b/gnu/packages/virtualization.scm
> @@ -2258,7 +2258,7 @@ (define-public umoci
>  (define-public skopeo
>    (package
>      (name "skopeo")
> -    (version "1.15.0")
> +    (version "1.15.1")
>      (source (origin
>                (method git-fetch)
>                (uri (git-reference
> @@ -2267,7 +2267,7 @@ (define-public skopeo
>                (file-name (git-file-name name version))
>                (sha256
>                 (base32
> -                "1f9n3ysdmll7vq8dmgpv03m8aqq3w9cfvbmxxpwmnv1nlfc67ihq"))))
> +                "0fhw3jrbklpz7kb1kdwn2hg3v2jyyz30710wkd0wlpfz4fyzmzb6"))))
>      (build-system gnu-build-system)
>      (native-inputs
>       (list go-1.21

push, see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=4fbce61aa91f93a0f56398e71095bd8b8d26de6c

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.