GNU bug report logs - #59202
[PATCH] python-check-manifest: Relax git security settings in tests.

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: <Ontje.Luensdorf <at> dlr.de>
Subject: bug#59202: closed (Re: bug#59202: [PATCH] python-check-manifest:
 Relax git security settings in tests.)
Date: Sat, 19 Nov 2022 18:37:02 +0000

[Message part 1 (text/plain, inline)]

Your bug report

#59202: [PATCH] python-check-manifest: Relax git security settings in tests.

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 59202 <at> debbugs.gnu.org.

-- 
59202: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=59202
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Ludovic Courtès <ludo <at> gnu.org>
To: <Ontje.Luensdorf <at> dlr.de>
Cc: 59202-done <at> debbugs.gnu.org
Subject: Re: bug#59202: [PATCH] python-check-manifest: Relax git security
 settings in tests.
Date: Sat, 19 Nov 2022 19:36:06 +0100

Hi,

<Ontje.Luensdorf <at> dlr.de> skribis:

> From 3de0d326956fa551a3dad6d65f6fabd9ff4282b3 Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Ontje=20L=C3=BCnsdorf?= <ontje.luensdorf <at> dlr.de>
> Date: Fri, 11 Nov 2022 21:09:21 +0100
> Subject: [PATCH] gnu: python-check-manifest: Relax git security settings in
>  tests.
>
> * gnu/packages/python-xyz.scm (python-check-manifest)[arguments]:
>   Allow git submodule commands via file protocol during testing.

Good catch.  Applied, thanks!

Ludo’.

[Message part 3 (message/rfc822, inline)]

From: <Ontje.Luensdorf <at> dlr.de>
To: <guix-patches <at> gnu.org>
Subject: [PATCH] python-check-manifest: Relax git security settings in tests.
Date: Fri, 11 Nov 2022 20:15:02 +0000

[Message part 4 (text/plain, inline)]

Hi Guix,

the git security fixes for CVE-2022-39253 break submodule tests in
python-check-manifest. This patch works around the issue by disabling
the security check in the check phase.

Best regards,
Ontje

[0001-gnu-python-check-manifest-Relax-git-security-setting.patch (text/x-patch, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.