From unknown Wed Jun 18 23:15:46 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#55990 <55990@debbugs.gnu.org> To: bug#55990 <55990@debbugs.gnu.org> Subject: Status: [PATCH staging/core-updates] gnu: nss, nss-certs: Update to 3.78. Reply-To: bug#55990 <55990@debbugs.gnu.org> Date: Thu, 19 Jun 2025 06:15:46 +0000 retitle 55990 [PATCH staging/core-updates] gnu: nss, nss-certs: Update to = 3.78. reassign 55990 guix-patches submitter 55990 John Kehayias severity 55990 normal tag 55990 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 14 23:44:22 2022 Received: (at submit) by debbugs.gnu.org; 15 Jun 2022 03:44:22 +0000 Received: from localhost ([127.0.0.1]:36209 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o1Jx8-00040G-BJ for submit@debbugs.gnu.org; Tue, 14 Jun 2022 23:44:22 -0400 Received: from lists.gnu.org ([209.51.188.17]:55344) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o1Jx6-000408-6R for submit@debbugs.gnu.org; Tue, 14 Jun 2022 23:44:21 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:49118) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o1Jx5-0001F3-VE for guix-patches@gnu.org; Tue, 14 Jun 2022 23:44:19 -0400 Received: from mail-40131.protonmail.ch ([185.70.40.131]:46262) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o1Jx3-0000fG-50 for guix-patches@gnu.org; Tue, 14 Jun 2022 23:44:19 -0400 Date: Wed, 15 Jun 2022 03:44:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1655264654; x=1655523854; bh=poHO7HPs2+RWd5V6MOZ1fYcPEvaxyCju2qZOV0IFHtQ=; h=Date:To:From:Reply-To:Subject:Message-ID:Feedback-ID:From:To:Cc: Date:Subject:Reply-To:Feedback-ID:Message-ID; b=F3HQ0WK4spIpnksKHpFncibtljmbkiLW5NUZNQ60gmNagGyychPiFiwFoMCWQjdq1 IrUj+9kwQHrPL1FZwUOU9YsUBVV18IU36jjY/kfMTk3OV1YhmY3hBhxkjOvHV0Q2Cv nmeCVPeotZJLiXN2waylcZBNZj4S5MS8SPbtTYi+AirA+qpZ54Os4brKqSA2mSA1yz XmGXTKVSwxKDKtrvHGerYVc4KL7LE2NffYhXWRGWtGMAapQ5f7AGdbe+jn3vwMXMqu DuoqJM0nEHHU7D7D0wM17t9w68ypseQmIFSIXKHWgG0pGV3jhyIkHKtQVEYmV/32Oz Iz+cETXf6seeg== To: Guix-patches From: John Kehayias Subject: [PATCH staging/core-updates] gnu: nss, nss-certs: Update to 3.78. Message-ID: Feedback-ID: 7805494:user:proton MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="b1_uxVBqPpt8v8HYb63VzhwoBcfa1ltHN3Ct4zFvdcjAlw" Received-SPF: pass client-ip=185.70.40.131; envelope-from=john.kehayias@protonmail.com; helo=mail-40131.protonmail.ch X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.2 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: John Kehayias Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This is a multi-part message in MIME format. --b1_uxVBqPpt8v8HYb63VzhwoBcfa1ltHN3Ct4zFvdcjAlw Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Guix, Over on IRC justkdng reported that nss was out of date: we have 3.72 and la= test is 3.78. Well, there are sources for 3.79 but Mozilla says 3.78 is lat= est: https://firefox-source-docs.mozilla.org/security/nss/releases/index.ht= ml#mozilla-projects-nss-releases (and 3.79 failed to build for me...). Part of the reason may be that guix refresh doesn't pick up a new version a= nd says 3.72 is the latest. I did not investigate, but just noting it. Attached is a patch to update nss and nss-certs to 3.78. I tested that they= build on x86_64, including tests. Since $ guix refresh nss -l Building the following 737 packages would ensure 1820 dependent packages ar= e rebuilt... I would guess this goes into either staging or core-updates, whatever will = be merged next? John --b1_uxVBqPpt8v8HYb63VzhwoBcfa1ltHN3Ct4zFvdcjAlw Content-Type: text/x-patch; name=0001-gnu-nss-nss-certs-Update-to-3.78.patch Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=0001-gnu-nss-nss-certs-Update-to-3.78.patch RnJvbSA4N2UyMjJlYmNjZTVhZGZmMzkwYThmMjYzYWVlOWQwMjJkZjQ4MDc1IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBKb2huIEtlaGF5aWFzIDxqb2huLmtlaGF5aWFzQHByb3Rvbm1h aWwuY29tPgpEYXRlOiBUdWUsIDE0IEp1biAyMDIyIDIzOjQxOjIyIC0wNDAwClN1YmplY3Q6IFtQ QVRDSF0gZ251OiBuc3MsIG5zcy1jZXJ0czogVXBkYXRlIHRvIDMuNzguCgoqIGdudS9wYWNrYWdl cy9uc3Muc2NtIChuc3MpOiBVcGRhdGUgdG8gMy43OC4KKiBnbnUvcGFja2FnZXMvY2VydHMuc2Nt IChuc3MtY2VydHMpOiBMaWtld2lzZS4KLS0tCiBnbnUvcGFja2FnZXMvY2VydHMuc2NtIHwgNCAr Ky0tCiBnbnUvcGFja2FnZXMvbnNzLnNjbSAgIHwgNCArKy0tCiAyIGZpbGVzIGNoYW5nZWQsIDQg aW5zZXJ0aW9ucygrKSwgNCBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9nbnUvcGFja2FnZXMv Y2VydHMuc2NtIGIvZ251L3BhY2thZ2VzL2NlcnRzLnNjbQppbmRleCA1M2ZiMDI3NTYzLi5jYWQy M2Q5N2E0IDEwMDY0NAotLS0gYS9nbnUvcGFja2FnZXMvY2VydHMuc2NtCisrKyBiL2dudS9wYWNr YWdlcy9jZXJ0cy5zY20KQEAgLTEzMSw3ICsxMzEsNyBAQCAoZGVmaW5lLXB1YmxpYyBuc3MtY2Vy dHMKICAgICA7OyBYWFggV2UgdXNlZCB0byByZWZlciB0byB0aGUgbnNzIHBhY2thZ2UgaGVyZSwg YnV0IHRoYXQgZXZlbnR1YWxseSBjYXVzZWQKICAgICA7OyBtb2R1bGUgY3ljbGVzLiAgVGhlIGJl bG93IGlzIGEgcXVpY2sgY29weS1wYXN0ZSBqb2IgdGhhdCBtdXN0IGJlIGtlcHQgaW4KICAgICA7 OyBzeW5jIG1hbnVhbGx5LiAgU3VyZWx5IHRoZXJlJ3MgYSBiZXR0ZXIgd2F54oCmPwotICAgICh2 ZXJzaW9uICIzLjcxIikKKyAgICAodmVyc2lvbiAiMy43OCIpCiAgICAgKHNvdXJjZSAob3JpZ2lu CiAgICAgICAgICAgICAgIChtZXRob2QgdXJsLWZldGNoKQogICAgICAgICAgICAgICAodXJpIChs ZXQgKCh2ZXJzaW9uLXdpdGgtdW5kZXJzY29yZXMKQEAgLTE0Miw3ICsxNDIsNyBAQCAoZGVmaW5l LXB1YmxpYyBuc3MtY2VydHMKICAgICAgICAgICAgICAgICAgICAgICAibnNzLSIgdmVyc2lvbiAi LnRhci5neiIpKSkKICAgICAgICAgICAgICAgKHNoYTI1NgogICAgICAgICAgICAgICAgKGJhc2Uz MgotICAgICAgICAgICAgICAgICIwbHkybDNkdjZ6NWhseHM3Mmg1eDY3OTZuaTN4MWJxNjBzYWF2 YWY0MmRkZ3Y0YXg3YjRyIikpCisgICAgICAgICAgICAgICAgIjAwNDhscW54ZngwcWQ5NGFkcGI2 YTFjcHNtY3NnZ3ZxODJwODUxcmlkaGM3d3gwejZtZ2wiKSkKICAgICAgICAgICAgICAgOzsgQ3Jl YXRlIG5zcy5wYyBhbmQgbnNzLWNvbmZpZy4KICAgICAgICAgICAgICAgKHBhdGNoZXMgKHNlYXJj aC1wYXRjaGVzICJuc3MtMy41Ni1wa2djb25maWcucGF0Y2giCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAibnNzLWdldGN3ZC1ub25udWxsLnBhdGNoIgpkaWZmIC0tZ2l0 IGEvZ251L3BhY2thZ2VzL25zcy5zY20gYi9nbnUvcGFja2FnZXMvbnNzLnNjbQppbmRleCA1ZTcx OWFkNWI4Li5iNmQ3Yjc4OTFkIDEwMDY0NAotLS0gYS9nbnUvcGFja2FnZXMvbnNzLnNjbQorKysg Yi9nbnUvcGFja2FnZXMvbnNzLnNjbQpAQCAtMTEyLDcgKzExMiw3IEBAIChkZWZpbmUtcHVibGlj IG5zcwogICAgIChuYW1lICJuc3MiKQogICAgIDs7IEFsc28gdXBkYXRlIGFuZCB0ZXN0IHRoZSBu c3MtY2VydHMgcGFja2FnZSwgd2hpY2ggZHVwbGljYXRlcyB2ZXJzaW9uIGFuZAogICAgIDs7IHNv dXJjZSB0byBhdm9pZCBhIHRvcC1sZXZlbCB2YXJpYWJsZSByZWZlcmVuY2UgJiBtb2R1bGUgY3lj bGUuCi0gICAgKHZlcnNpb24gIjMuNzIiKQorICAgICh2ZXJzaW9uICIzLjc4IikKICAgICAoc291 cmNlIChvcmlnaW4KICAgICAgICAgICAgICAgKG1ldGhvZCB1cmwtZmV0Y2gpCiAgICAgICAgICAg ICAgICh1cmkgKGxldCAoKHZlcnNpb24td2l0aC11bmRlcnNjb3JlcwpAQCAtMTIzLDcgKzEyMyw3 IEBAIChkZWZpbmUtcHVibGljIG5zcwogICAgICAgICAgICAgICAgICAgICAgICJuc3MtIiB2ZXJz aW9uICIudGFyLmd6IikpKQogICAgICAgICAgICAgICAoc2hhMjU2CiAgICAgICAgICAgICAgICAo YmFzZTMyCi0gICAgICAgICAgICAgICAgIjBibmg2ODNuaWo2czBndmpjZ3doeXc1ZDN5eDlmcG00 MnB4ajVibTk3cjBreTZnaG05a2YiKSkKKyAgICAgICAgICAgICAgICAiMDA0OGxxbnhmeDBxZDk0 YWRwYjZhMWNwc21jc2dndnE4MnA4NTFyaWRoYzd3eDB6Nm1nbCIpKQogICAgICAgICAgICAgICA7 OyBDcmVhdGUgbnNzLnBjIGFuZCBuc3MtY29uZmlnLgogICAgICAgICAgICAgICAocGF0Y2hlcyAo c2VhcmNoLXBhdGNoZXMgIm5zcy0zLjU2LXBrZ2NvbmZpZy5wYXRjaCIKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICJuc3MtZ2V0Y3dkLW5vbm51bGwucGF0Y2giCi0tIAoy LjM2LjEKCg== --b1_uxVBqPpt8v8HYb63VzhwoBcfa1ltHN3Ct4zFvdcjAlw-- From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 15 05:19:19 2022 Received: (at 55990) by debbugs.gnu.org; 15 Jun 2022 09:19:19 +0000 Received: from localhost ([127.0.0.1]:36532 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o1PBG-0006sG-UB for submit@debbugs.gnu.org; Wed, 15 Jun 2022 05:19:19 -0400 Received: from mailrelay.tugraz.at ([129.27.2.202]:25718) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o1PBB-0006s3-ND for 55990@debbugs.gnu.org; Wed, 15 Jun 2022 05:19:17 -0400 Received: from lprikler-laptop.ist.intra (gw.ist.tugraz.at [129.27.202.101]) by mailrelay.tugraz.at (Postfix) with ESMTPSA id 4LNKW24jw0z1LZWS; Wed, 15 Jun 2022 11:19:10 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 mailrelay.tugraz.at 4LNKW24jw0z1LZWS DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tugraz.at; s=mailrelay; t=1655284750; bh=ZnpLr6z29SO9XDdbW4NtqGgWysLqM1w4aXnliS5VnyE=; h=Subject:From:To:Date:In-Reply-To:References:From; b=GhrG2sdpBOGzfGHOr6mRoyYk0EPDOjJzEkV77Gs8ACfSqVUye04J9eZiGuDzZO+8X S/GEHX+RMjgmpTgai7zqFs0EsVZQ/XuJ1S7ZCyCK6a8FluZmwv8CHG1jY5nKFREQDs 9x3PzgABpo7RzTbvw3SuK6kBvz56hjf49W6sxF18= Message-ID: <457a9efaf1d553494d749b1bde8217eb0d4d22e0.camel@ist.tugraz.at> Subject: Re: [PATCH staging/core-updates] gnu: nss, nss-certs: Update to 3.78. From: Liliana Marie Prikler To: John Kehayias , 55990@debbugs.gnu.org Date: Wed, 15 Jun 2022 11:19:09 +0200 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.42.1 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-TUG-Backscatter-control: waObeELIUl4ypBWmcn/8wQ X-Spam-Scanner: SpamAssassin 3.003001 X-Spam-Score-relay: -1.9 X-Scanned-By: MIMEDefang 2.74 on 129.27.10.116 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 55990 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Am Mittwoch, dem 15.06.2022 um 03:44 +0000 schrieb John Kehayias: > $ guix refresh nss -l > Building the following 737 packages would ensure 1820 dependent > packages are rebuilt... 1820 is core-updates material, but note that nss-certs has "only" 622 rebuilds. Note that both should be grafted on master due to their security relevance. Also, > Subject: [PATCH] gnu: nss, nss-certs: Update to 3.78. > > * gnu/packages/nss.scm (nss): Update to 3.78. > * gnu/packages/certs.scm (nss-certs): Likewise. One package per patch, these are not linked. Cheers From debbugs-submit-bounces@debbugs.gnu.org Mon Aug 29 16:05:32 2022 Received: (at 55990-done) by debbugs.gnu.org; 29 Aug 2022 20:05:33 +0000 Received: from localhost ([127.0.0.1]:33951 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oSl0m-0004rD-Lt for submit@debbugs.gnu.org; Mon, 29 Aug 2022 16:05:32 -0400 Received: from mail-40133.protonmail.ch ([185.70.40.133]:38315) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oSl0k-0004qx-HB for 55990-done@debbugs.gnu.org; Mon, 29 Aug 2022 16:05:31 -0400 Date: Mon, 29 Aug 2022 20:05:16 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1661803524; x=1662062724; bh=bfvA8Feb8PxfBCfwJwb/evRMO2YwJ2+wsbJphZf+YQE=; h=Date:To:From:Cc:Reply-To:Subject:Message-ID:In-Reply-To: References:Feedback-ID:From:To:Cc:Date:Subject:Reply-To: Feedback-ID:Message-ID; b=TzQUzxUyHQ6v/I7kCP9RCAjpJSfBGkAjkll6eofN50eDXTvNXTF0/NHE24orodjKf Qf4KqU1R5qAH3DZmDuwcMteK8eaCrLN0ZIzDn/tAAR5VVki5/eUE8nCCBUn+JSITkQ OEYL3LBzy602QCjgHuxRB+qYFsBR7Qwp3bZQBPClxCIrlqd56s6djPiaWVNk/CeHyz f2dNb5x9GsFh3OE2IXZcM4Cq9j5Uf0H8vMFCRwk/8GOHvNJt102/lfVgtaalAASXWT KWaaoUFNEvUUNGhMvJnvHVDsEKROGLQH14qRd2TYK80JngFNpvWysYwc6LzxBiymHb bWH15qIvkLAsA== To: Liliana Marie Prikler From: John Kehayias Subject: Re: [PATCH staging/core-updates] gnu: nss, nss-certs: Update to 3.78. Message-ID: <87v8qa24uf.fsf@protonmail.com> In-Reply-To: <457a9efaf1d553494d749b1bde8217eb0d4d22e0.camel@ist.tugraz.at> References: <457a9efaf1d553494d749b1bde8217eb0d4d22e0.camel@ist.tugraz.at> Feedback-ID: 7805494:user:proton MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 55990-done Cc: 55990-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: John Kehayias Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, On Wed, Jun 15, 2022 at 11:19 AM, Liliana Marie Prikler wrote: > Am Mittwoch, dem 15.06.2022 um 03:44 +0000 schrieb John Kehayias: >> $ guix refresh nss -l >> Building the following 737 packages would ensure 1820 dependent >> packages are rebuilt... > 1820 is core-updates material, but note that nss-certs has "only" 622 > rebuilds. Note that both should be grafted on master due to their > security relevance. > Yes, you are right, sorry I missed that. But this has been supplanted by ne= wer updates on the staging branch already. Closing. > Also, >> Subject: [PATCH] gnu: nss, nss-certs: Update to 3.78. >> >> * gnu/packages/nss.scm (nss): Update to 3.78. >> * gnu/packages/certs.scm (nss-certs): Likewise. > One package per patch, these are not linked. > > Cheers From unknown Wed Jun 18 23:15:46 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Tue, 27 Sep 2022 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator