guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 1/1] gnu: perl: Replace with patched version [fixes CVE-2016-


From: Ludovic Courtès
Subject: Re: [PATCH 1/1] gnu: perl: Replace with patched version [fixes CVE-2016-2381].
Date: Thu, 03 Mar 2016 17:33:46 +0100
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)

Leo Famulari <address@hidden> skribis:

> On Wed, Mar 02, 2016 at 10:52:58PM +0100, Ludovic Courtès wrote:

[...]

>> Otherwise LGTM, as long as you confirm that nothing goes really wrong
>> once it’s applied.  :-)
>
> Here are some things I tried:
>
> 1) Built and booted a VM with `guix system vm`. I don't know if perl (as
> opposed to perl-boot0) is used in this process, but it did work.
>
> 2) Built and installed git on top of it, and then rolled back the commit
> and used `git add -i` to recreate it, and then `git send-email` to
> submit it. Both of those tools are Perl scripts.

These do sound like good tests.  :-)

Ludo’.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]