From unknown Mon Jun 16 23:46:52 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#47941 <47941@debbugs.gnu.org> To: bug#47941 <47941@debbugs.gnu.org> Subject: Status: guix lint -c cve stacktrace Reply-To: bug#47941 <47941@debbugs.gnu.org> Date: Tue, 17 Jun 2025 06:46:52 +0000 retitle 47941 guix lint -c cve stacktrace reassign 47941 guix submitter 47941 Jack Hill severity 47941 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 21 16:30:09 2021 Received: (at submit) by debbugs.gnu.org; 21 Apr 2021 20:30:09 +0000 Received: from localhost ([127.0.0.1]:59903 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZJU9-0001hn-Fq for submit@debbugs.gnu.org; Wed, 21 Apr 2021 16:30:09 -0400 Received: from lists.gnu.org ([209.51.188.17]:36076) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZJU4-0001gd-Un for submit@debbugs.gnu.org; Wed, 21 Apr 2021 16:30:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56768) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lZJU4-0003KV-Oj for bug-guix@gnu.org; Wed, 21 Apr 2021 16:30:04 -0400 Received: from minsky.hcoop.net ([104.248.1.95]:34518) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lZJU1-0002g3-L2 for bug-guix@gnu.org; Wed, 21 Apr 2021 16:30:04 -0400 Received: from marsh.hcoop.net ([45.55.52.66]) by minsky.hcoop.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lZJTz-0008VC-5r for bug-guix@gnu.org; Wed, 21 Apr 2021 16:29:59 -0400 Date: Wed, 21 Apr 2021 16:29:58 -0400 (EDT) From: Jack Hill X-X-Sender: jackhill@marsh.hcoop.net To: bug-guix@gnu.org Subject: guix lint -c cve stacktrace Message-ID: User-Agent: Alpine 2.21 (DEB 202 2017-01-01) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="925712948-622695294-1619036999=:8414" Received-SPF: pass client-ip=104.248.1.95; envelope-from=jackhill@jackhill.us; helo=minsky.hcoop.net X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --925712948-622695294-1619036999=:8414 Content-Type: text/plain; format=flowed; charset=UTF-8 Content-Transfer-Encoding: 8BIT Hi Guix, Using guix ae5128e21eb7afa66bd7cfd7fd1bc5764d00663e, the cve lint check fails when fetching the CVE database as follows: $ guix lint -c cve hello fetching CVE database for 2021... Backtrace: 15 (primitive-load "/home/jackhill/.config/guix/current/bi…") In guix/ui.scm: 2164:12 14 (run-guix-command _ . _) In ice-9/boot-9.scm: 1736:10 13 (with-exception-handler _ _ #:unwind? _ # _) 1731:15 12 (with-exception-handler # …) In srfi/srfi-1.scm: 634:9 11 (for-each # …) In guix/scripts/lint.scm: 65:4 10 (run-checkers _ _ #:store _) In srfi/srfi-1.scm: 634:9 9 (for-each # …) In guix/scripts/lint.scm: 74:21 8 (_ _) In guix/lint.scm: 1178:4 7 (check-vulnerabilities _ _) 1170:9 6 (_ _) In unknown file: 5 (force #) In guix/lint.scm: 1153:2 4 (_) 1112:2 3 (call-with-networking-fail-safe _ _ _) In ice-9/boot-9.scm: 1736:10 2 (with-exception-handler _ _ #:unwind? _ # _) 1669:16 1 (raise-exception _ #:continuable? _) 1667:16 0 (raise-exception _ #:continuable? _) ice-9/boot-9.scm:1667:16: In procedure raise-exception: Wrong type (expecting array): #f Best, Jack --925712948-622695294-1619036999=:8414-- From debbugs-submit-bounces@debbugs.gnu.org Wed Apr 21 18:04:47 2021 Received: (at 47941-done) by debbugs.gnu.org; 21 Apr 2021 22:04:47 +0000 Received: from localhost ([127.0.0.1]:60001 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZKxi-0008GJ-PH for submit@debbugs.gnu.org; Wed, 21 Apr 2021 18:04:47 -0400 Received: from eggs.gnu.org ([209.51.188.92]:33616) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZKxg-0008G6-TN for 47941-done@debbugs.gnu.org; Wed, 21 Apr 2021 18:04:45 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:36511) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lZKxb-0006ka-E6; Wed, 21 Apr 2021 18:04:39 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=55810 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1lZKxa-00027z-5a; Wed, 21 Apr 2021 18:04:38 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Jack Hill Subject: Re: bug#47941: guix lint -c cve stacktrace References: Date: Thu, 22 Apr 2021 00:04:35 +0200 In-Reply-To: (Jack Hill's message of "Wed, 21 Apr 2021 16:29:58 -0400 (EDT)") Message-ID: <87im4f2t1o.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 47941-done Cc: 47941-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Jack Hill skribis: > Using guix ae5128e21eb7afa66bd7cfd7fd1bc5764d00663e, the cve lint > check fails when fetching the CVE database as follows: > > $ guix lint -c cve hello > fetching CVE database for 2021... > Backtrace: > 15 (primitive-load "/home/jackhill/.config/guix/current/bi=E2= =80=A6") > In guix/ui.scm: > 2164:12 14 (run-guix-command _ . _) > In ice-9/boot-9.scm: > 1736:10 13 (with-exception-handler _ _ #:unwind? _ # _) > 1731:15 12 (with-exception-handler # =E2=80=A6) > In srfi/srfi-1.scm: > 634:9 11 (for-each # =E2=80=A6) > In guix/scripts/lint.scm: > 65:4 10 (run-checkers _ _ #:store _) > In srfi/srfi-1.scm: > 634:9 9 (for-each # =E2=80=A6) > In guix/scripts/lint.scm: > 74:21 8 (_ _) > In guix/lint.scm: > 1178:4 7 (check-vulnerabilities _ _) > 1170:9 6 (_ _) > In unknown file: > 5 (force #) > In guix/lint.scm: > 1153:2 4 (_) > 1112:2 3 (call-with-networking-fail-safe _ _ _) > In ice-9/boot-9.scm: > 1736:10 2 (with-exception-handler _ _ #:unwind? _ # _) > 1669:16 1 (raise-exception _ #:continuable? _) > 1667:16 0 (raise-exception _ #:continuable? _) > > ice-9/boot-9.scm:1667:16: In procedure raise-exception: > Wrong type (expecting array): #f Fixed: https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3D7dbc2fcb45fac4a0b= 64fef8efa8c858a047d0498 It looks like a couple of bogus CVE entries crept in. It=E2=80=99s surpris= ing because we never encountered such issues before, so I wonder if MITRE changed something on their side. Thanks, Ludo=E2=80=99. From unknown Mon Jun 16 23:46:52 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 20 May 2021 11:24:07 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator