guix-patches
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug#34036] [PATCH] gnu: irssi: Update to 1.1.2 [fixes CVE-2019-5882].


From: Kei Kebreau
Subject: [bug#34036] [PATCH] gnu: irssi: Update to 1.1.2 [fixes CVE-2019-5882].
Date: Thu, 10 Jan 2019 16:08:19 -0500
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)

Oh, it's not an auto-generated tarball! In that case I've attached the
much simpler update patch.

Leo Famulari <address@hidden> writes:

> On Thu, Jan 10, 2019 at 01:03:20PM -0500, Kei Kebreau wrote:
>> * gnu/packages/irc.scm (irssi): Update to 1.1.2.
>> [source]: Use 'git-fetch'.
>> [arguments]: Add 'patch-scripts' phase.
>> [native-inputs]: Add autoconf, automake, and libtool.
>
> Thanks!
>
> But why switch to git-fetch when they offer a tarball? All else being
> equal, we should stick to tarballs when they are offered by upstream.
>
> Specifically, let's use this one:
>
> https://github.com/irssi/irssi/releases/download/1.1.2/irssi-1.1.2.tar.xz

Attachment: 0001-gnu-irssi-Update-to-1.1.2-fixes-CVE-2019-5882.patch
Description: Text document


reply via email to

[Prev in Thread] Current Thread [Next in Thread]