Mark H Weaver <m...@netris.org> writes: > Hi Marius, > > mba...@fastmail.com (Marius Bakke) writes: > >> mbakke pushed a commit to branch master >> in repository guix. >> >> commit 65bfe30d8a4e930599603f6d835023bbd0dbcb9a >> Author: Marius Bakke <mba...@fastmail.com> >> Date: Thu Apr 12 19:43:31 2018 +0200 >> >> gnu: nghttp2: Update to 1.31.1 [fixes CVE-2018-1000168]. >> >> * gnu/packages/web.scm (nghttp2): Update to 1.31.1. > > Thank you for this, but it would entail far too many builds to update on > the 'master' branch. 'curl' depends on 'nghttp2'. According to 'guix > refresh -l', it would require 2839 rebuilds on x86_64.
On 'master', nghttp2 only has 1 dependent, the reverse curl dependency was added in this 'core-updates'. Since we haven't started the "full" core-updates on Hydra yet, I figured it was okay. What do you think?
signature.asc
Description: PGP signature
