[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Expat in GuixSD, please update
|
From: |
Leo Famulari |
|
Subject: |
Re: Expat in GuixSD, please update |
|
Date: |
Wed, 25 Oct 2017 13:31:08 -0400 |
|
User-agent: |
Mutt/1.9.1 (2017-09-22) |
On Wed, Oct 25, 2017 at 07:29:28PM +0200, Tobias Geerinckx-Rice wrote:
> Leo Famulari wrote on 25/10/17 at 19:22:
> > Expat 2.2.3's release notes only mentioned CVE-2017-11742, which is a
> > Windows vulnerability and out of scope for Guix. And I didn't see
> > security issues disclosed in the 2.2.4 release notes.
>
> Ah, sorry to spread misinfo. I don't have Web access at the moment and
> erred on the side of caution. I'll adjust the patch accordingly & push.
I think we can still mention that we've fixed that bug. Somebody could
still use Guix as a source of free source code even if they were
developing for Windows.
No big deal either way, IMO.
signature.asc
Description: PGP signature