[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#30827] [PATCH] gnu: util-linux: Fix CVE-2018-7738.
|
From: |
Leo Famulari |
|
Subject: |
[bug#30827] [PATCH] gnu: util-linux: Fix CVE-2018-7738. |
|
Date: |
Mon, 19 Mar 2018 18:15:51 -0400 |
|
User-agent: |
Mutt/1.9.3 (2018-01-21) |
On Mon, Mar 19, 2018 at 10:15:22AM +0100, Ludovic Courtès wrote:
> I’m late to the party, but I’m wondering in this case if, instead of
> grafting, we should simply add an address@hidden package, and make
> sure GuixSD uses that one in %base-packages.
>
> That way, both GuixSD and manually installed util-linux would get the
> Bash completion fix. It’s probably OK that packages that depend on
> util-linux don’t get the fixed version because users don’t get bash
> completion from there.
>
> WDYT?
What do you think of the attached patch?
0001-gnu-util-linux-Fix-CVE-2018-7738-without-grafting.patch
Description: Text document
signature.asc
Description: PGP signature