|
| From: | Jack Hill |
| Subject: | [bug#36424] expat-2.2.7 for CVE-2018-20843 |
| Date: | Fri, 28 Jun 2019 15:56:42 -0400 (EDT) |
| User-agent: | Alpine 2.20 (DEB 67 2015-01-07) |
Hi Guix,Sebastian Pipping recently wrote to guix-devel@ about expat-2.2.7 which fixes CVE-2018-20843 [0]. I've prepared the forthcoming patch to add a replacement for expat with expat-2.2.7. I also changed the origin to use the GitHub hosted tarball as upstream is moving in that direction.
[0] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843 Best, Jack
| [Prev in Thread] | Current Thread | [Next in Thread] |