From debbugs-submit-bounces@debbugs.gnu.org Wed May 22 14:48:32 2024 Received: (at submit) by debbugs.gnu.org; 22 May 2024 18:48:32 +0000 Received: from localhost ([127.0.0.1]:57661 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9r0q-0000bq-GO for submit@debbugs.gnu.org; Wed, 22 May 2024 14:48:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:39002) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1s9r0o-0000bj-Ck for submit@debbugs.gnu.org; Wed, 22 May 2024 14:48:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1s9r0e-0005WI-SV for guix-patches@gnu.org; Wed, 22 May 2024 14:48:20 -0400 Received: from wolfsden.cz ([37.205.8.62]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1s9r0c-0008Pe-EZ for guix-patches@gnu.org; Wed, 22 May 2024 14:48:20 -0400 Received: by wolfsden.cz (Postfix, from userid 104) id 85CFD29676A; Wed, 22 May 2024 18:48:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1716403693; bh=XMOpk0igPnwYg93jIbXRP3DXUOECy75ue2zl3a0E9Mc=; h=From:To:Cc:Subject:Date; b=O9c7a0WvBObcEikbHw1oKSCPuaApx/yY0GXEa5NO1qWUBa+nKNc9DyFUV7dVcwK6K hI1NrvdBuBoK8CX41XCPGQw3MOgyrH0DYtDIRLgNvmYJNksFV3zzbxh7/7wpdVsWrE B3iJip927VYTUUWFrEee07Yx2awatA3yr6e0N8cYbAsanyA6wX8tPGWlHmhbYeqiBR lUTtQZ9a+4dd8dzzdAOpqQAX2KtvTWRsVqKCUOkxESVujHMWXt8i3TjdaF28l3w4S4 7YoavdFwjMXBA/XGLooCaoSGUPOcpoPWRc8QEbeZwtUreTzJI+aJIp7/QUb9xAqUBd /5VjA51hNyOh6qH4sx+qRpXX6eTnE7/S3XFpQkABuPjqdrrmWpxGefIB81mszC8nvW 5zWwvEiLl7o6Cf5hRLW+B153W07ENgNJzuk+e/Nnw/Jff/pVaQrICTLyHRQZvsnDOg RjJYjbWFiae1fHYKS8Fh9nxBAuR3TJTovbSBrauOitd3QMt8LVxIW4sBTqJC6nd30n 2zasDhwUlpmG1lY5xYhXs+rk036qhvrGINmS+8qtTcQTbzPCB2GFdgYR0LN5IkD/+/ Nkuy1yTm94PHP5S1wmrG0dqxagtA7F4BrCwmO2wUuiw510Py19wXcFC5sd9tRqYYSM r5e0fpKnFPkF7yv6dfgW9yO8= X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from localhost (unknown [193.32.127.139]) by wolfsden.cz (Postfix) with ESMTPSA id 9825D2954FB; Wed, 22 May 2024 18:48:12 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1716403692; bh=XMOpk0igPnwYg93jIbXRP3DXUOECy75ue2zl3a0E9Mc=; h=From:To:Cc:Subject:Date; b=t/6hWgRqFIvoKdirMZ3K/qJ2iAMrx2uFFz74cNdVgxoh1C8mqzHvMSthwuT97HSMi UF6JNjjcjp+GObEDdMXMkHi5Q4jw2wDxAA4xZcbZy1dEOWjl9odoPqy+1OQR69bnRB 8NLJkrygABCQjqbpUQZBafDQXPUz9/pW4JDZ9t2YIjhS+VMbk5k+IWOQHbLuj5MbgE FhdVKVsmvZ2nLnGWaDlWRjgOsUhs7NA9Pfrj00aRNestZEAWxtIP7pH63IsYAlitPZ W0PY4TErzFEro1G43l+DV1358p0XoiR+4lKmMdhXETpSM/v8f2mzgTSk3p2iyAz2D3 79hHuPnc8dC0oJFzQWcJXxax3tiw99FG+WLKfpbZWrdoIK4p0opZv09tR9UEzGynUX q+k7or/bgk8BQtgmTz4oYGyQoEc5BLz+G9W/1fNUdRy4HED+8oirSD8ChdBoV2u9bN pUICKgWsYVdlcJVVRf9LEbhoMgF7Ju0pG1Hu2WwFUCM0XGuyxqEqenIc7wwNuw8UVZ jrXA+sVjJOPC4Oj+ejC/DFj9LeN2f8S8DkSW3ztfz1sOT9RMW9Wt+DdpLYjKEq5OE4 wapRH6Obwg+k5UYnlc2hlFABgF5s5m6MAPKDNCBYGKXSSDUeW3mbvSS/aAetYETcYU /0kPqR/tWG5ks8HmhUDUXdew= From: Tomas Volf <~@wolfsden.cz> To: guix-patches@gnu.org Subject: [PATCH] gnu: skopeo: Update to 1.15.1 [security fixes]. Date: Wed, 22 May 2024 20:47:55 +0200 Message-ID: X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=37.205.8.62; envelope-from=~@wolfsden.cz; helo=wolfsden.cz X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: Tomas Volf <~@wolfsden.cz> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This fixes CVE-2024-3727. * gnu/packages/virtualization.scm (skopeo): Update to 1.15.1. Change-Id: Icebb6f50e7317bce9ff106d71ad30dcfa6665666 --- gnu/packages/virtualization.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm index 34cccd6550..d45249455e 100644 --- a/gnu/packages/virtualization.scm +++ b/gnu/packages/virtualization.scm @@ -2258,7 +2258,7 @@ (define-public umoci (define-public skopeo (package (name "skopeo") - (version "1.15.0") + (version "1.15.1") (source (origin (method git-fetch) (uri (git-reference @@ -2267,7 +2267,7 @@ (define-public skopeo (file-name (git-file-name name version)) (sha256 (base32 - "1f9n3ysdmll7vq8dmgpv03m8aqq3w9cfvbmxxpwmnv1nlfc67ihq")))) + "0fhw3jrbklpz7kb1kdwn2hg3v2jyyz30710wkd0wlpfz4fyzmzb6")))) (build-system gnu-build-system) (native-inputs (list go-1.21 -- 2.41.0 From debbugs-submit-bounces@debbugs.gnu.org Thu May 23 01:32:48 2024 Received: (at 71124-done) by debbugs.gnu.org; 23 May 2024 05:32:48 +0000 Received: from localhost ([127.0.0.1]:58397 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sA14K-0006hL-2q for submit@debbugs.gnu.org; Thu, 23 May 2024 01:32:48 -0400 Received: from smtp21.cstnet.cn ([159.226.251.21]:42822 helo=cstnet.cn) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sA14H-0006hD-Bp for 71124-done@debbugs.gnu.org; Thu, 23 May 2024 01:32:46 -0400 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowAAnLxPl1E5mOBfqBg--.704S2; Thu, 23 May 2024 13:32:24 +0800 (CST) From: Zheng Junjie To: Tomas Volf <~@wolfsden.cz> Subject: Re: [bug#71124] [PATCH] gnu: skopeo: Update to 1.15.1 [security fixes]. In-Reply-To: (Tomas Volf's message of "Wed, 22 May 2024 20:47:55 +0200") References: User-Agent: mu4e 1.12.4; emacs 30.0.50 Date: Thu, 23 May 2024 13:32:19 +0800 Message-ID: <87jzjlrt3w.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowAAnLxPl1E5mOBfqBg--.704S2 X-Coremail-Antispam: 1UD129KBjvdXoW7XFy7uF1fZr13tF1rKw48JFb_yoWktrg_ur y3A3yavr4vgr1jkrs2yF1fJFyrXFW8Zr4fK3W3Ka1xtas5WrsFqFsruFy0yF13AF4UtFs5 Ars8CrW5uryI9jkaLaAFLSUrUUUUUb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbV8YjsxI4VWkCwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUCVW8JwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwA2z4x0Y4vEx4A2jsIE14v26r4UJVWxJr1l84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_JrI_JrylYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Gr0_Gr1UYxBIdaVFxhVjvj DU0xZFpf9x07UTMKZUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 71124-done Cc: 71124-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain Tomas Volf <~@wolfsden.cz> writes: > This fixes CVE-2024-3727. > > * gnu/packages/virtualization.scm (skopeo): Update to 1.15.1. > > Change-Id: Icebb6f50e7317bce9ff106d71ad30dcfa6665666 > --- > gnu/packages/virtualization.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm > index 34cccd6550..d45249455e 100644 > --- a/gnu/packages/virtualization.scm > +++ b/gnu/packages/virtualization.scm > @@ -2258,7 +2258,7 @@ (define-public umoci > (define-public skopeo > (package > (name "skopeo") > - (version "1.15.0") > + (version "1.15.1") > (source (origin > (method git-fetch) > (uri (git-reference > @@ -2267,7 +2267,7 @@ (define-public skopeo > (file-name (git-file-name name version)) > (sha256 > (base32 > - "1f9n3ysdmll7vq8dmgpv03m8aqq3w9cfvbmxxpwmnv1nlfc67ihq")))) > + "0fhw3jrbklpz7kb1kdwn2hg3v2jyyz30710wkd0wlpfz4fyzmzb6")))) > (build-system gnu-build-system) > (native-inputs > (list go-1.21 push, see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=4fbce61aa91f93a0f56398e71095bd8b8d26de6c --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmZO1OMACgkQO1qpk+Gi 3/AmYw/+JHZXcNsdZ7jDSFQnfOkt8VAWxi0c2rpQ5r+f2xYl/YhVe0IjMx9UvpSu J1zdeKLbwYtd/9hpHNt0QM4N6MpRcjUiaWbuc8CVLqYFIXetYinwS9Bid2DM/CET ApEMq1gyBD5P86navr9XuDpPgWc2b6tWC5aP3pK7FyGRIXGfLse6j6jUq+E57Ksa wqWK1Vmw2NYViYpoG6OPK4fR0qgbX8CdvBd0xIv8d9K0306LlkN0Qu3FaVTPN8kN ytdR14u49t3CXJJdeEbRbAms5rb/F1u6w54nFXGlWJKYTF6CscolN1KqBwpCZfgG Iln34qiy1zWBnolozpoIZQIh5OpfOAENiN7AAKM9m5HeRFUj248DFxLlYEeCLJlL MSrRKzjU1UaB4NhdY7vukQJKKp8C9LxWT3ZQtqIdfr0jmsogAlEh7qAVdamAoN9b HKqeUl+SEydafTFNOuytQUCAS/BHtOabu/2sXcBEdzuzSVODo5NTQt0WWtJqOnnl o+fk46ra1joJrxQ2zp97rkiGQgr4HnGEgesaHT+fCj2w0ffVzFemzbcOAK0ZVrmi tDU/uvK76v8Y+xOaJiBYQW/GOvhzUEWBslY9QPRgptLAlxSNppjD+CthqCkUFeVF 8dWG42g2i61FQFkiL4HbR5BREgY5LbOMFOhyx4HbdSyHlO5gh00= =dvm/ -----END PGP SIGNATURE----- --=-=-=-- From unknown Fri Jun 20 07:15:34 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 20 Jun 2024 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator