[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug#30827] [PATCH] gnu: util-linux: Fix CVE-2018-7738.

From: Leo Famulari
Subject: [bug#30827] [PATCH] gnu: util-linux: Fix CVE-2018-7738.
Date: Mon, 19 Mar 2018 18:15:51 -0400
User-agent: Mutt/1.9.3 (2018-01-21)

On Mon, Mar 19, 2018 at 10:15:22AM +0100, Ludovic Courtès wrote:
> I’m late to the party, but I’m wondering in this case if, instead of
> grafting, we should simply add an address@hidden package, and make
> sure GuixSD uses that one in %base-packages.
> That way, both GuixSD and manually installed util-linux would get the
> Bash completion fix.  It’s probably OK that packages that depend on
> util-linux don’t get the fixed version because users don’t get bash
> completion from there.

What do you think of the attached patch?

Attachment: 0001-gnu-util-linux-Fix-CVE-2018-7738-without-grafting.patch
Description: Text document

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]