bug#27429: core-updates and shishi [was Re: bug#27429: Stack clash (CVE-2017-1000366 etc)]

2017-06-30 Thread Ludovic Courtès
Leo Famulari skribis: > On Fri, Jun 30, 2017 at 12:27:57AM +0200, Ludovic Courtès wrote: >> > -(native-inputs `(("pkg-config" ,pkg-config))) >> > +(arguments >> > + `(#:phases >> > + (modify-phases %standard-phases >> > + (add-before 'configure

bug#27429: core-updates and shishi [was Re: bug#27429: Stack clash (CVE-2017-1000366 etc)]

2017-06-30 Thread Leo Famulari
On Fri, Jun 30, 2017 at 12:27:57AM +0200, Ludovic Courtès wrote: > > -(native-inputs `(("pkg-config" ,pkg-config))) > > +(arguments > > + `(#:phases > > + (modify-phases %standard-phases > > + (add-before 'configure 'bootstrap > > + (lambda _ (zero? (system*

bug#27429: core-updates and shishi [was Re: bug#27429: Stack clash (CVE-2017-1000366 etc)]

2017-06-29 Thread Ludovic Courtès
Leo Famulari skribis: > On Thu, Jun 29, 2017 at 10:06:08PM +0200, Ludovic Courtès wrote: >> Leo, let me know when you feel that we should start a new evaluation. > > First I want to ungraft today's libgcrypt and poppler replacements. > > I also want to apply the attached

bug#27429: core-updates and shishi [was Re: bug#27429: Stack clash (CVE-2017-1000366 etc)]

2017-06-29 Thread Leo Famulari
On Thu, Jun 29, 2017 at 10:06:08PM +0200, Ludovic Courtès wrote: > Leo, let me know when you feel that we should start a new evaluation. First I want to ungraft today's libgcrypt and poppler replacements. I also want to apply the attached patch so we can stop using libgcrypt-1.5 with Shishi, and