[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 1/1] gnu: perl: Replace with patched version [fixes CVE-2016-
From: |
Ludovic Courtès |
Subject: |
Re: [PATCH 1/1] gnu: perl: Replace with patched version [fixes CVE-2016-2381]. |
Date: |
Thu, 03 Mar 2016 17:33:46 +0100 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) |
Leo Famulari <address@hidden> skribis:
> On Wed, Mar 02, 2016 at 10:52:58PM +0100, Ludovic Courtès wrote:
[...]
>> Otherwise LGTM, as long as you confirm that nothing goes really wrong
>> once it’s applied. :-)
>
> Here are some things I tried:
>
> 1) Built and booted a VM with `guix system vm`. I don't know if perl (as
> opposed to perl-boot0) is used in this process, but it did work.
>
> 2) Built and installed git on top of it, and then rolled back the commit
> and used `git add -i` to recreate it, and then `git send-email` to
> submit it. Both of those tools are Perl scripts.
These do sound like good tests. :-)
Ludo’.