From debbugs-submit-bounces@debbugs.gnu.org Sat Dec 02 18:12:37 2017 Received: (at submit) by debbugs.gnu.org; 2 Dec 2017 23:12:37 +0000 Received: from localhost ([127.0.0.1]:42270 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLGxZ-0004ag-Da for submit@debbugs.gnu.org; Sat, 02 Dec 2017 18:12:37 -0500 Received: from eggs.gnu.org ([208.118.235.92]:32777) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLGxX-0004aQ-72 for submit@debbugs.gnu.org; Sat, 02 Dec 2017 18:12:35 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eLGxR-0005Ix-0c for submit@debbugs.gnu.org; Sat, 02 Dec 2017 18:12:29 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_40,T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:37991) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1eLGxQ-0005In-T2 for submit@debbugs.gnu.org; Sat, 02 Dec 2017 18:12:28 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:51975) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eLGxP-0007Us-CB for guix-patches@gnu.org; Sat, 02 Dec 2017 18:12:28 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eLGxL-0005Dn-Bd for guix-patches@gnu.org; Sat, 02 Dec 2017 18:12:27 -0500 Received: from minos.uwaterloo.ca ([129.97.128.78]:51844) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1eLGxL-00057f-4L for guix-patches@gnu.org; Sat, 02 Dec 2017 18:12:23 -0500 Received: from localhost (CPEac202e023313-CMac202e023310.cpe.net.cable.rogers.com [99.231.21.41]) (authenticated bits=0) by minos.uwaterloo.ca (8.14.4/8.14.4) with ESMTP id vB2MNRKm027441 (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256 verify=NO) for ; Sat, 2 Dec 2017 17:23:30 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 minos.uwaterloo.ca vB2MNRKm027441 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uwaterloo.ca; s=default; t=1512253410; bh=NaR8FMSyy5cjcRcKflp+MevaWduP2DgbijPlbxyPyBs=; h=Date:From:To:Subject:From; b=zHT5g3TwDvNtXFTAhtAhXtVrRHlFNJUbt8v+6VRBsYSAjN9KhpYwg7S7RvoJsueSN +wDjzPabaMQZz/JVu8aaGprY+BP0YuSAwcBxh2xiMfDD6F1W2C/ALIAfFooO4zmpiQ OuuPN7hr+bXQqnc6gwEY/Pj0OhDytVnzHM7bifd0= Date: Sat, 2 Dec 2017 17:23:27 -0500 From: Andy Patterson To: guix-patches@gnu.org Subject: [PATCH] gnu: spice: Update to 0.14.0. Message-ID: <20171202172327.0db2d98b@uwaterloo.ca> X-Mailer: Claws Mail 3.15.1-dirty (GTK+ 2.24.31; x86_64-unknown-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable X-UUID: 5812ca24-3c85-43f9-a540-8bbde50fd232 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Hi all, This patch allows qemu to use OpenGL acceleration in the guest when certain parameters are configured. I tested it out by running supertux and supertuxkart in a guest. I downloaded the sources over https, but I didn't verify them against the signature provided, since I couldn't figure out where to download the keys from. Tips on how to find keys in general would be appreciated. Also - the source needs to use https because connection over http fails. Thanks, -- Andy =46rom 8d1c8528e46ff7eb24def9181017317b8a7d54ea Mon Sep 17 00:00:00 2001 From: Andy Patterson Date: Sat, 2 Dec 2017 16:22:11 -0500 Subject: [PATCH] gnu: spice: Update to 0.14.0. This is a follow-up to commit 9a187b39b7991463aa6985f5b746fccf69789525. * gnu/packages/spice.scm (spice): Update to 0.14.0. [origin]: Remove them. : Use https. [inputs]: Add orc. [home-page]: Update to use https. --- gnu/packages/spice.scm | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/gnu/packages/spice.scm b/gnu/packages/spice.scm index 7d49f90be..10f7c6bc5 100644 --- a/gnu/packages/spice.scm +++ b/gnu/packages/spice.scm @@ -203,20 +203,15 @@ which allows users to view a desktop computing enviro= nment.") (define-public spice (package (name "spice") - (version "0.12.8") + (version "0.14.0") (source (origin (method url-fetch) (uri (string-append - "http://www.spice-space.org/download/releases/" + "https://www.spice-space.org/download/releases/" "spice-" version ".tar.bz2")) (sha256 (base32 - "0za03i77j8i3g5l2np2j7vy8cqsdbkm9wbv4hjnaqq9xhz2sa0gr")) - (patches - (search-patches "spice-CVE-2017-7506.patch" - "spice-CVE-2016-9577.patch" - "spice-CVE-2016-9578-1.patch" - "spice-CVE-2016-9578-2.patch")))) + "0j5q7cp5p95jk8fp48gz76rz96lifimdsx1wnpmfal0nnnar9nrs")))) (build-system gnu-build-system) (propagated-inputs `(("openssl" ,openssl) @@ -228,6 +223,7 @@ which allows users to view a desktop computing environm= ent.") ("libjpeg-turbo" ,libjpeg-turbo) ("lz4" ,lz4) ("opus" ,opus) + ("orc" ,orc) ("zlib" ,zlib))) (native-inputs `(("pkg-config" ,pkg-config) --=20 2.15.0 From debbugs-submit-bounces@debbugs.gnu.org Sat Dec 02 19:41:26 2017 Received: (at 29540) by debbugs.gnu.org; 3 Dec 2017 00:41:26 +0000 Received: from localhost ([127.0.0.1]:42307 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLILV-00006S-R1 for submit@debbugs.gnu.org; Sat, 02 Dec 2017 19:41:26 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:57961) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLILR-00006I-UZ for 29540@debbugs.gnu.org; Sat, 02 Dec 2017 19:41:22 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 35E3520083; Sat, 2 Dec 2017 19:41:21 -0500 (EST) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Sat, 02 Dec 2017 19:41:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=zynq5VEXA9rfMl/AP3Qh9HjQyZ9mhNiTxYXSi10J4bk=; b=sTTG8 LGiYxASXvafmlZ7JTepvrdvO+GRjOYeTU7gcddKztMbupMvqKPdcxndUsuzkn6ah K46khcQRXldawD59L26asXib/+gzwV3kcPoQ5WqWUp3e5GTRpWdZCLIqx3a8oneI fx+MGuuZaRVo6YAwA0rWAqgpVfw/dszbWkghLw= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=zynq5VEXA9rfMl/AP3Qh9HjQyZ9mh NiTxYXSi10J4bk=; b=PyfLh5rX0Rl4jAhS7j69ldd/zyocCfOgzVB1yvpB700y9 cDIW4x+XaINbGbM+APO4jaImwRK2KSULXJi5Xb5YTOLrk1ifb6hi6U0JTeohB1o4 ER7Nzd08zrtu11np6ACBmf8AIXo6hk8804G6f5vx548hbz6fpkxAoJp2CUHtWAMH y3FnpLSSLZif31mmz5dCArDprDR6/MKwYpLauiXOf26PhdnwVd2heIguCbmMTb87 45m2KyBiquIvHFLJEu8WBxnivPioJ8u45scK6jHBD072x4MvFB4+YuXko4Ny86gJ WgHS0wkdFNpAtlHa/bgAeMUw07lzEka0/kI+KG5Jg== X-ME-Sender: Received: from localhost (ool-182ec776.dyn.optonline.net [24.46.199.118]) by mail.messagingengine.com (Postfix) with ESMTPA id E5DBC7FACC; Sat, 2 Dec 2017 19:41:20 -0500 (EST) Date: Sat, 2 Dec 2017 19:41:23 -0500 From: Leo Famulari To: Andy Patterson Subject: Re: [bug#29540] [PATCH] gnu: spice: Update to 0.14.0. Message-ID: <20171203004123.GB353@jasmine.lan> References: <20171202172327.0db2d98b@uwaterloo.ca> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="i7F3eY7HS/tUJxUd" Content-Disposition: inline In-Reply-To: <20171202172327.0db2d98b@uwaterloo.ca> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 29540 Cc: 29540@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --i7F3eY7HS/tUJxUd Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Dec 02, 2017 at 05:23:27PM -0500, Andy Patterson wrote: > I downloaded the sources over https, but I didn't verify them against > the signature provided, since I couldn't figure out where to download > the keys from. Tips on how to find keys in general would be appreciated. "How to use GnuPG" is probably best left to the experts: https://gnupg.org/documentation/guides.html But here's how I would acquire this key and verify the signature. Note that the crucial identifier, the key fingerprint, is provided in the error message of the first command. ------ $ gpg --verify spice-0.14.0.tar.bz2.sign =20 gpg: assuming signed data in 'spice-0.14.0.tar.bz2' gpg: Signature made Wed 11 Oct 2017 07:33:58 AM EDT gpg: using RSA key 94A9F75661F77A6168649B23A9D8C21429AC6C82 gpg: Can't check signature: No public key $ gpg --keyserver hkps://keyserver.ubuntu.com --receive-keys 94A9F75661F77A= 6168649B23A9D8C21429AC6C82 $ gpg --verify spice-0.14.0.tar.bz2.sign = =20 gpg: assuming signed data in 'spice-0.14.0.tar.bz2' gpg: Signature made Wed 11 Oct 2017 07:33:58 AM EDT gpg: using RSA key 94A9F75661F77A6168649B23A9D8C21429AC6C82 gpg: Good signature from "Christophe Fergeau (teuf) = " [unknown] gpg: aka "Christophe Fergeau " [unknown] gpg: aka "Christophe Fergeau " [unknown] gpg: aka "Christophe Fergeau " [unknow= n] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owne= r. Primary key fingerprint: 94A9 F756 61F7 7A61 6864 9B23 A9D8 C214 29AC 6C82 ------ We can be reasonably sure that someone with that private key signed the tarball. Now, is it the right key? Hopefully the upstream documentation says which keys are considered "authorized" to sign Spice releases. --i7F3eY7HS/tUJxUd Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlojSDMACgkQJkb6MLrK fwgVjg/6AxRmF8Im/FQ/loZrtlFzGhzXuj2O+pDNhWWWLnUqsBDqDrkbfIdOai3W SLGQxD+x3FnoP/fflHJ0HaMo5JGsBHF5PM18IJkqmB4Scf/S4x5HuuNgxZRPTZDM ljqIhSuw1VFjNJfurcdE+550+plZkRp+Aj1LeRA+CUH4zJBf3NfX5cQ2elO0SJrr oOB4V+R8nIUCtLrlj6Me+9CFJatEvGBepohtBh5iTmkXlPErpFa9upEiPusWO1iH XyTDfrRRxfitKIArRbZq9sYviPtxJrZ6EEIUmmYHSvTmILLI8KIj+dnT5dmEw8aa iyjiwCbz38ZaXQSeZBF0Y3r9/TsSnUvKYH/ojGvbzA/LEc1ZcWN4n3lq+ZjVTawX PPtXmeMKupEpUWxf6ky7Nf2Z3iQ7iCunqBiVC0Ve1GZZxi0GABWFWjgZb/oxoxcd e6Dq8Q2WMz83m0OZtin/mNuDrKtTVDqLdJcWH+cO5qZdzbI+cHgMDU7Emtm+RFS6 RDjW0OH/B6LIdCoZzwVrvfzgJutAaC9KFu33iXkIJEM8qlUoj6Q3NvZOyqcWbZR2 m07y+/JpKUJJJ71Ao6sVh3X+REhA7IsuYi1OS5wDVWiYpcphltXuKot/OrMyzZVB zBEpDLlq2BFMtVw9JQK7lHoikbH3MjervwdNagsdsQ+unLry7Tc= =h8/E -----END PGP SIGNATURE----- --i7F3eY7HS/tUJxUd-- From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 03 00:41:17 2017 Received: (at 29540) by debbugs.gnu.org; 3 Dec 2017 05:41:17 +0000 Received: from localhost ([127.0.0.1]:42358 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLN1d-0002D6-Rf for submit@debbugs.gnu.org; Sun, 03 Dec 2017 00:41:17 -0500 Received: from psyche.uwaterloo.ca ([129.97.128.244]:40140) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLN1c-0002Cu-Fz for 29540@debbugs.gnu.org; Sun, 03 Dec 2017 00:41:13 -0500 Received: from localhost (CPEac202e023313-CMac202e023310.cpe.net.cable.rogers.com [99.231.21.41]) (authenticated bits=0) by psyche.uwaterloo.ca (8.14.4/8.14.4) with ESMTP id vB35f2HI010402 (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256 verify=NO); Sun, 3 Dec 2017 00:41:06 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 psyche.uwaterloo.ca vB35f2HI010402 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uwaterloo.ca; s=default; t=1512279666; bh=3oTm980xXwj/JNviF0cC4KB0xHLXXvloduuwhO/ab5I=; h=Date:From:To:Subject:In-Reply-To:References:From; b=hgmYi+Gf3T8dyKhjpqwmqP2AmJ9UOSHdFzEFLMmkPyyeMrvX6E8oIfECEcVy/BoOY KVFQRC5hCZKj7/QW8Chns7AxGqLW7FngprgZKkOLQRxLqcPeAWOv47qZlHQokJPGVC VVJzeJX6w96M9RJ7FKhsaSBoBo/FRR9cbNoJJSbo= Date: Sun, 3 Dec 2017 00:41:02 -0500 From: Andy Patterson To: Leo Famulari , 29540@debbugs.gnu.org Subject: Re: [bug#29540] [PATCH] gnu: spice: Update to 0.14.0. Message-ID: <20171203004102.62febb6d@uwaterloo.ca> In-Reply-To: <20171203004123.GB353@jasmine.lan> References: <20171202172327.0db2d98b@uwaterloo.ca> <20171203004123.GB353@jasmine.lan> X-Mailer: Claws Mail 3.15.1-dirty (GTK+ 2.24.31; x86_64-unknown-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-UUID: 4d865f38-b4c7-47f4-92d0-f19eb3d62af5 X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 29540 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Hi Leo, On Sat, 2 Dec 2017 19:41:23 -0500 Leo Famulari wrote: > On Sat, Dec 02, 2017 at 05:23:27PM -0500, Andy Patterson wrote: > > I downloaded the sources over https, but I didn't verify them > > against the signature provided, since I couldn't figure out where > > to download the keys from. Tips on how to find keys in general > > would be appreciated. > > "How to use GnuPG" is probably best left to the experts: > > https://gnupg.org/documentation/guides.html > > But here's how I would acquire this key and verify the signature. Note > that the crucial identifier, the key fingerprint, is provided in the > error message of the first command. > > ------ > $ gpg --verify spice-0.14.0.tar.bz2.sign > gpg: assuming signed data in 'spice-0.14.0.tar.bz2' > gpg: Signature made Wed 11 Oct 2017 07:33:58 AM EDT > gpg: using RSA key > 94A9F75661F77A6168649B23A9D8C21429AC6C82 gpg: Can't check signature: > No public key > > $ gpg --keyserver hkps://keyserver.ubuntu.com --receive-keys > 94A9F75661F77A6168649B23A9D8C21429AC6C82 > > $ gpg --verify > spice-0.14.0.tar.bz2.sign gpg: assuming signed data in > 'spice-0.14.0.tar.bz2' gpg: Signature made Wed 11 Oct 2017 07:33:58 > AM EDT gpg: using RSA key > 94A9F75661F77A6168649B23A9D8C21429AC6C82 gpg: Good signature from > "Christophe Fergeau (teuf) " [unknown] > gpg: aka "Christophe Fergeau > " [unknown] gpg: aka "Christophe > Fergeau " [unknown] gpg: aka > "Christophe Fergeau " [unknown] gpg: WARNING: > This key is not certified with a trusted signature! gpg: > There is no indication that the signature belongs to the owner. > Primary key fingerprint: 94A9 F756 61F7 7A61 6864 9B23 A9D8 C214 > 29AC 6C82 ------ > Ooh, thanks. > We can be reasonably sure that someone with that private key signed > the tarball. Now, is it the right key? Hopefully the upstream > documentation says which keys are considered "authorized" to sign > Spice releases. I didn't find anything. *shrugs* -- Andy From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 03 17:46:25 2017 Received: (at 29540) by debbugs.gnu.org; 3 Dec 2017 22:46:25 +0000 Received: from localhost ([127.0.0.1]:43932 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLd1i-0005Z0-0c for submit@debbugs.gnu.org; Sun, 03 Dec 2017 17:46:25 -0500 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21092) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLd1f-0005Yr-O4 for 29540@debbugs.gnu.org; Sun, 03 Dec 2017 17:46:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1512341154; s=zoho; d=elephly.net; i=rekado@elephly.net; h=References:From:To:Cc:Subject:In-reply-to:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; l=2484; bh=JNiba51j3T/IUQysh+IfiwgujnzzKQwezjnS9l0yv2Y=; b=INN1e4s1vpvRA8+z++jFKBIXcs8x6BlFC+3/BmL2iOfTGhoLVN0NZPXeEzgK5/AX 9obAK464Nl+5Pq1xd8keAOdX+1AA4r0kcsKjyGg/NJdP84/MLl9xK3VhFEmEyHkdgxf /uiblkb3FjCu6KvexstY1YoI20DV/U0pMqmjhSsg= Received: from localhost (port-92-200-98-40.dynamic.qsc.de [92.200.98.40]) by mx.zohomail.com with SMTPS id 1512341154569766.3634319714481; Sun, 3 Dec 2017 14:45:54 -0800 (PST) References: <20171202172327.0db2d98b@uwaterloo.ca> <20171203004123.GB353@jasmine.lan> <20171203004102.62febb6d@uwaterloo.ca> User-agent: mu4e 0.9.18; emacs 25.3.1 From: Ricardo Wurmus To: Andy Patterson Subject: Re: [bug#29540] [PATCH] gnu: spice: Update to 0.14.0. In-reply-to: <20171203004102.62febb6d@uwaterloo.ca> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Sun, 03 Dec 2017 23:45:51 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-ID: <877eu34ehs.fsf@elephly.net> X-ZohoMailClient: External X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 29540 Cc: 29540@debbugs.gnu.org, Leo Famulari X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) Andy Patterson writes: >> $ gpg --verify >> spice-0.14.0.tar.bz2.sign gpg: assuming signed data in >> 'spice-0.14.0.tar.bz2' gpg: Signature made Wed 11 Oct 2017 07:33:58 >> AM EDT gpg: using RSA key >> 94A9F75661F77A6168649B23A9D8C21429AC6C82 gpg: Good signature from >> "Christophe Fergeau (teuf) " [unknown] >> gpg: aka "Christophe Fergeau >> " [unknown] gpg: aka "Christophe >> Fergeau " [unknown] gpg: aka >> "Christophe Fergeau " [unknown] gpg: WARNING: >> This key is not certified with a trusted signature! gpg: >> There is no indication that the signature belongs to the owner. >> Primary key fingerprint: 94A9 F756 61F7 7A61 6864 9B23 A9D8 C214 >> 29AC 6C82 ------ >> > > Ooh, thanks. > >> We can be reasonably sure that someone with that private key signed >> the tarball. Now, is it the right key? Hopefully the upstream >> documentation says which keys are considered "authorized" to sign >> Spice releases. > > I didn't find anything. *shrugs* Here=E2=80=99s the release announcement: https://lists.freedesktop.org/archives/spice-announce/2017-October/00006= 1.html It is a signed message by Christophe Fergeau, but I haven=E2=80=99t been ab= le to verify the signature. The message could have been mangled by the mailing list. According to https://cgit.freedesktop.org/spice/spice/log/NEWS Christophe Fergeau has handled the previous release as well, and the same person is listed as the current maintainer. The =E2=80=9Cv0.14.0=E2= =80=9D tag is signed with the same key: --8<---------------cut here---------------start------------->8--- git verify-tag v0.14.0 gpg: Signature made Wed 11 Oct 2017 10:36:45 AM CEST gpg: using RSA key A9D8C21429AC6C82 gpg: Good signature from "Christophe Fergeau (teuf) = " [unknown] gpg: aka "Christophe Fergeau " [unknown] gpg: aka "Christophe Fergeau " [unknown= ] gpg: aka "Christophe Fergeau " [unknow= n] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owne= r. Primary key fingerprint: 94A9 F756 61F7 7A61 6864 9B23 A9D8 C214 29AC 6C82 --8<---------------cut here---------------end--------------->8--- -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 04 13:11:02 2017 Received: (at 29540) by debbugs.gnu.org; 4 Dec 2017 18:11:02 +0000 Received: from localhost ([127.0.0.1]:45814 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLvCo-0000uc-48 for submit@debbugs.gnu.org; Mon, 04 Dec 2017 13:11:02 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:55573) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLvCl-0000uG-Pw for 29540@debbugs.gnu.org; Mon, 04 Dec 2017 13:11:00 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id DD4E020D09; Mon, 4 Dec 2017 13:10:57 -0500 (EST) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Mon, 04 Dec 2017 13:10:57 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=9uODlZC+g83gYAQTiBCtxiskFJR/3+1MWJZ6GrylSd0=; b=x04ot wJxsQWzykqWiqoRpLGVypt4K3x8nQB/B4gqfQv2UpHr3YXCLhPyhHIwvbt6+0cw1 jjbNMYwJ06/it5BuTo3ShwciBCBjjuEchdWyXzKSpCZRLxuUJn0UPxGIWi9SbqGI jltgqrUDuH8TVha/V3kbTismbuCG84rRaxK/JU= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=9uODlZC+g83gYAQTiBCtxiskFJR/3 +1MWJZ6GrylSd0=; b=RHLuQSHp9/Npr2yLEM6NuhlQGtF/IrIYuG7C6lyMHAT3I I1yJIobZyVotkxmzcLwbkl1YjwPzoGxHV8AS3CJXOZr3YY/7DU3O01CO5jtBwqhu aL2FDLe0AyyPrMZRVqhP6TmnxcLYXj64aKXxwBOVrXrWalbTxMjifLMgh7Z9CBfQ NXVs49/m4R2EVstnL3ICxSOh4dphAQSiiBbEyJtocxaayAqgOIGbcNgJG8Yx35AD ikt0+zXteKx/gQVYJXl93KA2x8q6hVrq3cRpQSV0JdSRKfnrg3Xt5puabzHVgyZI Qm7cMGt7JGeWJ4a31SjpYgrlRycWjqksEW8+YCKPQ== X-ME-Sender: Received: from localhost (mfe2536d0.tmodns.net [208.54.37.254]) by mail.messagingengine.com (Postfix) with ESMTPA id 8D4397F9A9; Mon, 4 Dec 2017 13:10:57 -0500 (EST) Date: Mon, 4 Dec 2017 13:10:53 -0500 From: Leo Famulari To: Ricardo Wurmus Subject: Re: [bug#29540] [PATCH] gnu: spice: Update to 0.14.0. Message-ID: <20171204181053.GA30970@jasmine.lan> References: <20171202172327.0db2d98b@uwaterloo.ca> <20171203004123.GB353@jasmine.lan> <20171203004102.62febb6d@uwaterloo.ca> <877eu34ehs.fsf@elephly.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="OgqxwSJOaUobr8KG" Content-Disposition: inline In-Reply-To: <877eu34ehs.fsf@elephly.net> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 29540 Cc: 29540@debbugs.gnu.org, Andy Patterson X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --OgqxwSJOaUobr8KG Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Dec 03, 2017 at 11:45:51PM +0100, Ricardo Wurmus wrote: > Andy Patterson writes: > >> We can be reasonably sure that someone with that private key signed > >> the tarball. Now, is it the right key? Hopefully the upstream > >> documentation says which keys are considered "authorized" to sign > >> Spice releases. > > > > I didn't find anything. *shrugs* >=20 > Here=E2=80=99s the release announcement: [...] Again we see that the "trust" part of the web of trust is a complicated and difficult topic. I'm doing a final test of this new QEMU [0] and I'll push if all goes well. [0] I make sure it can create and run a GuixSD VM. This exercises both the qemu and qemu-minimal packages. --OgqxwSJOaUobr8KG Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlolj6oACgkQJkb6MLrK fwjYCw/9Em52FSTcGP2VKJ7vfPu+abjgsrcaMgla2akTzCSDRGf9ZhSoLlilhZNO k5Pfx1bEZBKug7yUfX8F96ux5DkPuemNm7H2jidz2QGBYCnc6xUwRUHmRiwwJpEh J3qtr3StSwswu2N12B8xyON5xkjVvN9z4x5Q/hK9DmBJoRTWimQGIuYH4uaFFBMm EHaUxnwyAZDiy3N4oXq5rey3sTykbEv/OgV19Urybm7PQ9eE/IZ/mkpWhzKzfLwz GACIDpvwI+B8//NzBTorbpMix+8e+6T1hrix7f0Z2GO6TrY/Mfz6jB+LKpnTCfPJ pSVZe7CGAqieHRwpHQHBQFqzHXNgiXCYOqdb60cA11E7XusTDk7NUdhnW1D8B6L9 he4nY97pT9LcjfE3vf6m3BVeFIdgMs08vJ5eInTd7LTpvavSqVM8Lw4W1ZGp4pQc o0H2niR/WTr1WMtFQGSBaaCP56KoE8AZSIZQvBc0hbKzHFdPfpbylkwEPWvy//xp KTialzbi6JFs8WxnGE7yo3HdQ/CosLFTOhjtjkJeJgAywsBZEL3K0yl+xedFOowS o3MG7gKguEkEXtPg6c2zGOMykQ6NbT6weHnnpW/zLE5UiHGfNvxniy9pB1lcr+fo NqbGmVv/A8aBfGkr8Hvqdv8zlLwqREjwfDp5xug7WhplBkBdxqM= =IPF1 -----END PGP SIGNATURE----- --OgqxwSJOaUobr8KG-- From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 04 14:06:49 2017 Received: (at 29540-done) by debbugs.gnu.org; 4 Dec 2017 19:06:50 +0000 Received: from localhost ([127.0.0.1]:45862 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLw4n-0004AQ-Lt for submit@debbugs.gnu.org; Mon, 04 Dec 2017 14:06:49 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:57339) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1eLw4m-0004AI-46 for 29540-done@debbugs.gnu.org; Mon, 04 Dec 2017 14:06:48 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id DF7C9208C2; Mon, 4 Dec 2017 14:06:47 -0500 (EST) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Mon, 04 Dec 2017 14:06:47 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc; s= mesmtp; bh=Y6nqwHbY0CjhlsBXafgbPiIiAGY3zKrv6wA9BB/h6As=; b=qykMR 1tfajxdfv8I+vG9gdzlm5fuvi4mUsymYwdRvIto0oDbbs/uTjoeuVTQh2tU0sDix 7QHWCIQE9eTarADYxPG+ZMd8VjK26pb8hRpnH46E6pSWJjk4FXdXSf/LLNLGVNQs kguz4azk36QC1ltQVSV08HAuU7cLhu0AGAHgPc= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=Y6nqwHbY0CjhlsBXafgbPiIiAGY3z Krv6wA9BB/h6As=; b=QrjO6Xy4Ovw7hpTGV6GCGEIcsSa34WQd2bgFw9EaePUvp mSuWCtWLwsZXAzrFBizYKU/cI5/dPvwgytrGfcabgV791ZLATy+w+Z5egWiFGTzX Qd/RgSZJLcBxlFekPxvemjIZ5XvJqUjNnUhA9tIDhtBIpDzKycvIJVKTXt6NYYvg WO6ulJLUxRsldQj/1Z38szFFXc7PhDCDFBFGz7Lbg8g4LPwLmNQTwMgtHpPXto8k ZbtBhGtV8Oate3E0629zzdxGYyIUBImSFdgAp2BHS4MbDJSXNbh9aNcjExzYJ8ok HXZBbE3R1XHeGBP0eSzx63P5X52uKFE05/X+ekqiQ== X-ME-Sender: Received: from localhost (mfe2536d0.tmodns.net [208.54.37.254]) by mail.messagingengine.com (Postfix) with ESMTPA id 92FDA240F8; Mon, 4 Dec 2017 14:06:47 -0500 (EST) Date: Mon, 4 Dec 2017 14:06:45 -0500 From: Leo Famulari To: Andy Patterson Subject: Re: [bug#29540] [PATCH] gnu: spice: Update to 0.14.0. Message-ID: <20171204190645.GA28066@jasmine.lan> References: <20171202172327.0db2d98b@uwaterloo.ca> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="tKW2IUtsqtDRztdT" Content-Disposition: inline In-Reply-To: <20171202172327.0db2d98b@uwaterloo.ca> User-Agent: Mutt/1.9.1 (2017-09-22) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 29540-done Cc: 29540-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --tKW2IUtsqtDRztdT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Dec 02, 2017 at 05:23:27PM -0500, Andy Patterson wrote: > Subject: [PATCH] gnu: spice: Update to 0.14.0. >=20 > This is a follow-up to commit 9a187b39b7991463aa6985f5b746fccf69789525. >=20 > * gnu/packages/spice.scm (spice): Update to 0.14.0. > [origin]: Remove them. > : Use https. > [inputs]: Add orc. > [home-page]: Update to use https. Pushed as b142756d9c6a2dd6936b7175f120846190f52aaa, also removing the leftover patch files and references to them from 'gnu/local.mk'. --tKW2IUtsqtDRztdT Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlolnMUACgkQJkb6MLrK fwgYvRAAnMbgQyYip2pPZZp2uSiFknZ2Fj+PaqJGqlY0nKcGxoBCv05L3fW+bYDo rhNK3/JjhTKohk5E8NYEhwTPBeVk9WA1U5R+bSXMVNmIiZBJHkNTQ1HZnGmI1hYM jjwwPQWbNqoPhmqYufbUUYSJH8jtsqMbXh0si3VXemwnwW0hYVKQrnq0xPFWAAeU wf51gMtGoz6sbO0EX35WgAo/mXVIVVEBdRewYx8Ic6D5fK0qLqVvIzc9e8Nd2HVK ZG6KL8imYl1IMNcC+x+jAsQnZe+eDH9N0PWe+aJ5Ch7x0ShxzIpi9TNOQ3qvF6+t T4wLosNd2e1LB/LOAaACP7Mfp/x8az0lYZaeRx3WW9+gW54IWe0Usi1eXJz/WYjE vMVr9MYoK9pXxnK1Wc1gyCHH0cSjT9rMwwggfg3f8eaSjrA/YfmfIGJXQNbj/JTm TEpUyhicJsptqO667M9V96AOj8fW30T4TAD1wHrHO1DK5o0PLOPcVjZ76cuqJ5mK Hx+u3lHwmAo0qt9JJbBEXEzqmYocKz7ljnnTSe1MJHtVIDrryxuG5Re+uT82IqZo JjHkX7A21udMxvtQlcv/hXpO7KLIWzRdrORqFB3UzqINmZAa/iHvHEz+OzdVOC1h NCLu07J9tIgcPf1obuxouMRpRFA1YAPnWlpGpUXn6EKH/JNRnCM= =GtW/ -----END PGP SIGNATURE----- --tKW2IUtsqtDRztdT-- From unknown Mon Aug 18 19:35:17 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Tue, 02 Jan 2018 12:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator