GNU bug report logs - #61821
[PATCH] gnu: perl-encode: Update to 3.19.

Previous Next

Package: guix-patches;

Reported by: Bruno Victal <mirai <at> makinata.eu>

Date: Sun, 26 Feb 2023 18:31:02 UTC

Severity: normal

Tags: patch

Done: Tobias Geerinckx-Rice <me <at> tobias.gr>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 61821 in the body.
You can then email your comments to 61821 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#61821; Package guix-patches. (Sun, 26 Feb 2023 18:31:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Bruno Victal <mirai <at> makinata.eu>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Sun, 26 Feb 2023 18:31:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Bruno Victal <mirai <at> makinata.eu>
To: guix-patches <at> gnu.org
Cc: Bruno Victal <mirai <at> makinata.eu>
Subject: [PATCH] gnu: perl-encode: Update to 3.19.
Date: Sun, 26 Feb 2023 18:29:55 +0000
* gnu/packages/perl.scm (perl-encode): Update to 3.19.
(propagated-inputs): Remove.
---

Fixes CVE-2021-36770.

 gnu/packages/perl.scm | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/perl.scm b/gnu/packages/perl.scm
index 7b97e7adfa..41b68baea8 100644
--- a/gnu/packages/perl.scm
+++ b/gnu/packages/perl.scm
@@ -4144,17 +4144,15 @@ (define-public perl-dynaloader-functions
 (define-public perl-encode
   (package
     (name "perl-encode")
-    (version "3.10")
+    (version "3.19")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "mirror://cpan/authors/id/D/DA/DANKOGAI/"
                            "Encode-" version ".tar.gz"))
        (sha256
-        (base32 "1a8rwcrxxhq81jcdvdwns05c65jwr5r6bxvby6vdcr3ny5m91my2"))))
+        (base32 "1x9f0naqskv9v7dif480vrzfmn8zhvq9g0w3r164v7pnxr4ghqwi"))))
     (build-system perl-build-system)
-    (propagated-inputs
-     (list perl-exporter perl-storable perl-parent))
     (home-page "https://metacpan.org/dist/Encode")
     (synopsis "Character encodings in Perl")
     (description "Encode module provides the interface between Perl strings and
-- 
2.39.1





Information forwarded to guix-patches <at> gnu.org:
bug#61821; Package guix-patches. (Sun, 26 Feb 2023 22:05:01 GMT) Full text and rfc822 format available.

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tobias Geerinckx-Rice <me <at> tobias.gr>
To: Bruno Victal <mirai <at> makinata.eu>
Cc: guix-patches <at> gnu.org, 61821-done <at> debbugs.gnu.org
Subject: Re: [bug#61821] [PATCH] gnu: perl-encode: Update to 3.19.
Date: Sun, 26 Feb 2023 23:01:50 +0100
[Message part 1 (text/plain, inline)]
Bruno,

Bruno Victal 写道:
> * gnu/packages/perl.scm (perl-encode): Update to 3.19.

Thanks!  Pushed as 6bae14f61479f04a40fee44b1d1d89a33d9e93c0. 
Rebase your thing.

> (propagated-inputs): Remove.

Detail: [], not (), for fields.

> Fixes CVE-2021-36770.

As a rule, we put this right in the commit title, like so:

 gnu: perl-encode: Update to 3.19 [fixes CVE-2021-36770].

When there's no assigned CVE (or TROVE, or…) identifier:

 gnu: perl-encode: Update to 3.19 [security fixes].

We also use the latter format when there are too many CVEs to list 
in the title — insert joke about your ‘favourite’ project — and 
list them all in the commit message.

Kind regards,

T G-R
[signature.asc (application/pgp-signature, inline)]

Reply sent to Tobias Geerinckx-Rice <me <at> tobias.gr>:
You have taken responsibility. (Sun, 26 Feb 2023 22:05:02 GMT) Full text and rfc822 format available.

Notification sent to Bruno Victal <mirai <at> makinata.eu>:
bug acknowledged by developer. (Sun, 26 Feb 2023 22:05:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Mon, 27 Mar 2023 11:24:08 GMT) Full text and rfc822 format available.

This bug report was last modified 1 year and 24 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.