guix.git/gnu/packages/patches/glibc-CVE-2017-15670-15671.patch, branch master Personal branch of https://git.savannah.gnu.org/cgit/guix.git/ for implementing 'guix deploy'. https://git.jakob.space/guix.git/atom?h=master 2018-01-02T15:55:17Z Revert "gnu: glibc: Fix CVE-2017-15670, CVE-2017-15671." 2018-01-02T15:55:17Z Marius Bakke 2017-11-28T17:04:36Z urn:sha1:0c86790bfdf5a3e61bff6e289c1dcef16154a27b These issues has been classified as minor by Debian: https://security-tracker.debian.org/tracker/CVE-2017-15670 https://security-tracker.debian.org/tracker/CVE-2017-15671 In addition, the patch only fixes one of the two CVEs it claims to fix. We don't backport most CVEs, especially non-critical ones, so no need to carry this (which is in 2.26). See discussion at <https://bugs.gnu.org/29490>. This reverts commit 60e29339d8389e678bb9ca4bd3420ee9ee88bdf2. gnu: glibc: Fix CVE-2017-15670, CVE-2017-15671. 2017-10-22T21:13:09Z Marius Bakke 2017-10-21T21:00:01Z urn:sha1:60e29339d8389e678bb9ca4bd3420ee9ee88bdf2 * gnu/packages/patches/glibc-CVE-2017-15670-15671.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/base.scm (glibc/linux)[replacement]: New field. (glibc/fixed): New variable. (glibc-2.24, glibc-2.23, glibc-2.22)[source](patches): Add 'glibc-CVE-2017-15670-15671.patch'.