From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] Apache HTTPD security update 2.4.57 Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16822697722915 (code B ref -1); Sun, 23 Apr 2023 17:10:01 +0000 Received: (at submit) by debbugs.gnu.org; 23 Apr 2023 17:09:32 +0000 Received: from localhost ([127.0.0.1]:46889 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdDP-0000kv-GB for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:09:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:40222) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdDJ-0000kb-8E for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:09:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pqdDH-0007C8-Mx for guix-patches@gnu.org; Sun, 23 Apr 2023 13:09:23 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pqdDG-0003G9-4X for guix-patches@gnu.org; Sun, 23 Apr 2023 13:09:23 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 445485C0087; Sun, 23 Apr 2023 13:09:19 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 23 Apr 2023 13:09:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269759; x=1682356159; bh=USVg/7wueivmzk3sre3J9e 1XDhTF0mwDIKvOaOt2owg=; b=QKDFtkyDMJF3VG9JuOnnRuAWa1mVEDOfN+iof9 CEiHA3l56Q/aUxrrWCX/nqi6VmZeEsjCitpTKkH7fRFcFkG8aJwVzXR8WcZ6Y8KS 9UIUl6NJ8DveHjlHff0oYezbGoelIXsFWJ5KB8BvopPjKcdry/SabXtHFf0Qv4Q9 uktvA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1682269759; x=1682356159; bh=USVg/7wueivmzk3sre3J9e1XDhTF0mwDIKv OaOt2owg=; b=cVAZ6HeellxtPeCe6gY1vrxEYc0CJu1SgR8akAoG52z3H/x4q7v u5AYuhVOrctl+lhAW3MM2wnGo0gLB1zIcP14CVvwTiCKpHuKrtIZixBbxTG04TWC xNwgRC+gvI32MINn2i+X6jhKy4zsWZxzmJEx+uhDdExYPEkUZHdjSLGnR/89BqJm rIEgoPJW2TCvL2pwKxGAzSob+Yz81cfAP7LXL6AbErob9smvPt/9HNGy89DO6JkT QfiENJ9qnpmzlSqqtXgjojRnRvkEKBbQ5V4zdwhuFfRstr31bMGLpOiQz31IawVj r8jE4WMG/BKrcBqQQYZuakrkjM8JacVv64A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfggtggusehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeffhedtfeeftddvueeifeduueejvdekhe ffueeijefgvdetleegheegfeehheduudenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sun, 23 Apr 2023 13:09:18 -0400 (EDT) Date: Sun, 23 Apr 2023 13:09:12 -0400 From: Leo Famulari Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Received-SPF: pass client-ip=66.111.4.27; envelope-from=leo@famulari.name; helo=out3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Here are patches to update HTTPD to the latest upstream release, 2.4.57. These patches also remove a bunch of spurious dependencies on the primary httpd package by creating a pinned variant. With these changes, we'll be able to update HTTPD freely without triggering thousands of rebuilds. From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] [PATCH 1/5] gnu: httpd: Update to 2.4.57 [security fixes]. References: In-Reply-To: Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:12:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org Received: via spool by 63038-submit@debbugs.gnu.org id=B63038.16822699193273 (code B ref 63038); Sun, 23 Apr 2023 17:12:02 +0000 Received: (at 63038) by debbugs.gnu.org; 23 Apr 2023 17:11:59 +0000 Received: from localhost ([127.0.0.1]:46915 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFm-0000qc-Nd for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:59 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:36465) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFk-0000q4-VG for 63038@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:57 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id E36915C00D2; Sun, 23 Apr 2023 13:11:51 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 23 Apr 2023 13:11:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:sender:subject :subject:to:to; s=mesmtp; t=1682269911; x=1682356311; bh=vJk3TaT ajEhIFx1KHUKTrsiAO9XpEQgDx5e8bohJgpI=; b=NaKa3s0GmE/zfebqB7vhE4l 9PkWLP+NFwjMTXobfoeg8KWEaRUddRiT2vXwk12Mqeki/C9fRjld2lIJo+pyXgd/ RxplcK9H4SBYjlHbWOWWcOAGWQTG45az49Pk5VMf1jEaJWOrh0f63DtjjIWh974i /cuP4ZTuCpgnT5nhiUwQ= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :message-id:mime-version:reply-to:sender:subject:subject:to:to :x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1682269911; x=1682356311; bh=vJk3TaTajEhIFx1KHUKTrsiAO9Xp EQgDx5e8bohJgpI=; b=Z/993tbW9Cqc1V07pbglUVEjkl2rJ+NSI0jHFIlryD74 3M5RlX7Py1qQ9ImgWHhO8sb8SEvr5fUoUM0hX8UMeaxK/j5OVmuW/QrI0fNt/KFo Nuu+HicTGcthNdK20dQCg30OA26JH2VFytC3YtxoqDxuuU71qU744QKmdTwCjMH8 y9R9WCsOeXVKB5RHfsD7boI/bKYluwn+sWlomGnj891oNW392p9R5WIVxtSe5UEH pKLPm/CERA7juIVbnOOpzwhpypZwyVS9WDIac8WPT9DZ/04I4YzCgas9TmHleWgF uP8vB08QPCQEtzCXx8xn/U3f+S9UjtB12uIHYOHoYA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffoggfgsedtkeertd ertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpefgteevudeuheegjeekkeffleejffekgf euffetheevtedtvdfhieelleeigeejgfenucffohhmrghinheprghprggthhgvrdhorhhg necuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgvoh esfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038@debbugs.gnu.org>; Sun, 23 Apr 2023 13:11:51 -0400 (EDT) From: Leo Famulari Date: Sun, 23 Apr 2023 13:11:44 -0400 Message-Id: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Fixes CVE-2023-27522, CVE-2023-25690, CVE-2022-37436, CVE-2022-36760, CVE-2006-20001, CVE-2022-31813, CVE-2022-30556, CVE-2022-30522, CVE-2022-29404, CVE-2022-28615, CVE-2022-28614, CVE-2022-28330, CVE-2022-26377, CVE-2022-23943, CVE-2022-22721, CVE-2022-22720, and CVE-2022-22719. * gnu/packages/web.scm (httpd): Update to 2.4.57. (httpd/pinned): New variable. * gnu/packages/gnome.scm (libsoup-minimal): Replace httpd with httpd/pinned. --- gnu/packages/gnome.scm | 2 +- gnu/packages/web.scm | 19 +++++++++++++++++-- 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm index 2cb087c987..49c678b2eb 100644 --- a/gnu/packages/gnome.scm +++ b/gnu/packages/gnome.scm @@ -5241,7 +5241,7 @@ (define-public libsoup-minimal vala curl gnutls ;for 'certtool' - httpd)) + httpd/pinned)) (propagated-inputs ;; libsoup-3.0.pc refers to all of these (except where otherwise noted) (list brotli diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 6fa3067bbe..c8a1d0123e 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -273,14 +273,14 @@ (define-public qhttp (define-public httpd (package (name "httpd") - (version "2.4.52") + (version "2.4.57") (source (origin (method url-fetch) (uri (string-append "mirror://apache/httpd/httpd-" version ".tar.bz2")) (sha256 (base32 - "1jgmfbazc2n9dnl7axhahwppyq25bvbvwx0lqplq76by97fgf9q1")))) + "0ajdz5f2w9nbmqydip2mv9m4xlnc4swmw7mqzgnrbq4mxr5bik6v")))) (build-system gnu-build-system) (native-inputs (list `(,pcre "bin"))) ;for 'pcre-config' (inputs (list apr apr-util openssl perl)) ; needed to run bin/apxs @@ -305,6 +305,21 @@ (define-public httpd (license license:asl2.0) (home-page "https://httpd.apache.org/"))) +;; A package variant that may be out of date and vulnerable. Only for use in +;; test suites and should never be referred to by a built package. +(define-public httpd/pinned + (hidden-package + (package + (inherit httpd) + (version "2.4.52") + (source (origin + (method url-fetch) + (uri (string-append "mirror://apache/httpd/httpd-" + version ".tar.bz2")) + (sha256 + (base32 + "1jgmfbazc2n9dnl7axhahwppyq25bvbvwx0lqplq76by97fgf9q1"))))))) + (define-public mod-wsgi (package (name "mod-wsgi") -- 2.39.2 From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] [PATCH 2/5] build-system/cmake: Add support for the #:disallowed-references key. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:12:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org Received: via spool by 63038-submit@debbugs.gnu.org id=B63038.16822699193279 (code B ref 63038); Sun, 23 Apr 2023 17:12:02 +0000 Received: (at 63038) by debbugs.gnu.org; 23 Apr 2023 17:11:59 +0000 Received: from localhost ([127.0.0.1]:46919 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFn-0000ql-AZ for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:59 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:40091) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFl-0000q6-An for 63038@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:57 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 493BA5C00D6; Sun, 23 Apr 2023 13:11:52 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 23 Apr 2023 13:11:52 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269912; x=1682356312; bh=zQx6C6WCu9dXdYxC3COulMIcXzJHX6+UR0+j6nb5pw8=; b= kv32SGTwEJki8FarVIZ+Mc6qla+5RgIDOiy1JIo6WIYpK7DDXe8SkAvmFpGMFo9R xhrHujF9LVPqtp8BlTdvn1GE2GeHk5ba5qbaMPw7V5oEIyi18KMKMJEptsDclk0h C9SQhAfoK9MpQ7UaYzTjt/fnWxruOtfaQ0UiTcK4d6k= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1682269912; x=1682356312; bh=z Qx6C6WCu9dXdYxC3COulMIcXzJHX6+UR0+j6nb5pw8=; b=LEEjl0l8DMdCcka+f zdZoMoxTP2621cv/Df/M9hfM1u/4+DKVPdCljI0ou7oxu9TSNnDuwegZDN69A2fw lb8fKgsU1ByTPOpjP+MqWrqrVuVU6rhtkNPFMfZ7+dBj/mSUFXwo2g+anbCqlGOv P5bRpWeCPm7Pta6xalgGQIA/g6vZhxnpjfnKu4uUnil5qdVrRarvpYBY/ZYH/Ruq ZhMrnfoNGUkGD1I4a2mpKAkkg6Iz+Ip7z2/6N7NSQ4JOLzbJUr3lhDhrj2M0F89W VnQidGY6+eyfSYTO9RiAW++nt2TaPRWs/HExUoFM0OJmNsEiGRFplmKJzXaJ8HSO XNe7w== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffojghfggfgsedtke ertdertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpefhgeegteeitddvudduveeuhedvhe fhfeehgfehvdfhudegueekhedvhfffhffhgeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038@debbugs.gnu.org>; Sun, 23 Apr 2023 13:11:51 -0400 (EDT) From: Leo Famulari Date: Sun, 23 Apr 2023 13:11:45 -0400 Message-Id: <00e2c85ad3d1d4504666bcd7e34ea29683c8059d.1682269908.git.leo@famulari.name> X-Mailer: git-send-email 2.39.2 In-Reply-To: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> References: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * guix/build-system/cmake.scm (cmake-build, cmake-cross-build): Add #:disallowed-references. --- guix/build-system/cmake.scm | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/guix/build-system/cmake.scm b/guix/build-system/cmake.scm index 09e3ac85db..ed979b9c6b 100644 --- a/guix/build-system/cmake.scm +++ b/guix/build-system/cmake.scm @@ -116,7 +116,8 @@ (define* (cmake-build name inputs (substitutable? #t) (imported-modules %cmake-build-system-modules) (modules '((guix build cmake-build-system) - (guix build utils)))) + (guix build utils))) + disallowed-references) "Build SOURCE using CMAKE, and with INPUTS. This assumes that SOURCE provides a 'CMakeLists.txt' file as its build system." (define build @@ -158,6 +159,7 @@ (define build #:target #f #:graft? #f #:substitutable? substitutable? + #:disallowed-references disallowed-references #:guile-for-build guile))) @@ -193,7 +195,8 @@ (define* (cmake-cross-build name (build (nix-system->gnu-triplet system)) (imported-modules %cmake-build-system-modules) (modules '((guix build cmake-build-system) - (guix build utils)))) + (guix build utils))) + disallowed-references) "Cross-build NAME using CMAKE for TARGET, where TARGET is a GNU triplet and with INPUTS. This assumes that SOURCE provides a 'CMakeLists.txt' file as its build system." -- 2.39.2 From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] [PATCH 3/5] gnu: neko: Build with httpd/pinned. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:13:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org Received: via spool by 63038-submit@debbugs.gnu.org id=B63038.16822699253323 (code B ref 63038); Sun, 23 Apr 2023 17:13:02 +0000 Received: (at 63038) by debbugs.gnu.org; 23 Apr 2023 17:12:05 +0000 Received: from localhost ([127.0.0.1]:46923 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFs-0000rW-NL for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:12:05 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:39441) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFl-0000q7-TO for 63038@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:58 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id D4D085C00CE; Sun, 23 Apr 2023 13:11:52 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Sun, 23 Apr 2023 13:11:52 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269912; x=1682356312; bh=8S8ktv/qmOiIaMgDf83j7gbAOrN1q8NbZ59vFPAVzM0=; b= i05nkPfKa3YISqyHfego43QdVFbWM8dprgBPXmMsjp2hgw0GFNdJ3tirxLnNcyWS SERQtIZz347DlrpFG2gFoaa0dN6wx5ToOtgNB6JGPq4PZdROXvs9DGMogLk8hrnE cloCNBHTb93CwU06Dn1wPIKlr1S8T/v6lGe/YL/kY3E= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1682269912; x=1682356312; bh=8 S8ktv/qmOiIaMgDf83j7gbAOrN1q8NbZ59vFPAVzM0=; b=EYL7sS4j7e0vygh83 TTlBkycyRBZNcneZzf2X7fePL2s5Gnp3u8w6ERVpsrfE5IG1e7jkqGe7OM0OCMjP YGz5PpazRz1rqh89/j6dF9h6/6sSNs5auVYsqM0eG56MTlHG4WRkuZvtbPCRuIFQ 87FGvj2KH95XX1zYtytltgut8fC0Z0wohb7V0HoifS9AEN2dILu6dMMcVg1czMBb unV/iUAb7TQp1h0PIUtaVpdSYBpeDppr3yEqdAktV+7K6JoVOVX7JKAaLsiIoTms OHqknXUkhu29SIBMd99rfhU8TFD3icpTIfDjOTLavdgXPE8DUJbQ7vIwqlRjsJ3E Yf2fA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffojghfggfgsedtke ertdertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpedtfedutdeuudehudehhfefieegje eljeevfffgvddvuddtjeehvdeuiefgudegffenucffohhmrghinhepnhgvkhhovhhmrdho rhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplh gvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038@debbugs.gnu.org>; Sun, 23 Apr 2023 13:11:52 -0400 (EDT) From: Leo Famulari Date: Sun, 23 Apr 2023 13:11:46 -0400 Message-Id: <70030d3036eb8d9930c7443b840f23a1a8b406c8.1682269908.git.leo@famulari.name> X-Mailer: git-send-email 2.39.2 In-Reply-To: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> References: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/haxe.scm (neko)[inputs]: Replace httpd with ... [native-inputs]: ... httpd/pinned. [arguments]: Forbid keeping a reference to httpd/pinned. --- gnu/packages/haxe.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/haxe.scm b/gnu/packages/haxe.scm index dbe8b2c19e..44ba33abd1 100644 --- a/gnu/packages/haxe.scm +++ b/gnu/packages/haxe.scm @@ -66,7 +66,8 @@ (define-public neko (base32 "1xgw646pghsjjbzd8qlaq17vq96swlrazpivrvyrhdj36vb3sci3")))) (build-system cmake-build-system) (arguments - (list #:phases + (list #:disallowed-references (list httpd/pinned) + #:phases #~(modify-phases %standard-phases (add-after 'unpack 'prefix (lambda _ @@ -76,7 +77,6 @@ (define-public neko (inputs (list apr apr-util gtk+-2 - httpd libgc mbedtls-apache mysql @@ -84,7 +84,9 @@ (define-public neko pcre sqlite zlib)) - (native-inputs (list git pkg-config)) ; git for source_archive and applying patch + (native-inputs (list httpd/pinned + git ; git for source_archive and applying patch + pkg-config)) (home-page "https://nekovm.org/") (synopsis "High-level dynamically typed programming language and virtual machine") -- 2.39.2 From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] [PATCH 4/5] gnu: 389-ds-base: Build with httpd/pinned. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:13:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org Received: via spool by 63038-submit@debbugs.gnu.org id=B63038.16822699253330 (code B ref 63038); Sun, 23 Apr 2023 17:13:03 +0000 Received: (at 63038) by debbugs.gnu.org; 23 Apr 2023 17:12:05 +0000 Received: from localhost ([127.0.0.1]:46925 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFt-0000rY-2H for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:12:05 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:37269) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFm-0000q9-By for 63038@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:58 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 52A505C00D4; Sun, 23 Apr 2023 13:11:53 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 23 Apr 2023 13:11:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269913; x=1682356313; bh=7PdXrdaoD6kEIopsF4MoThcfGdBk2BbxZuX4MQD6oZ0=; b= 0bApAAzbVJWaRnJUWawXZi0TcxrT38mBBuza2iXRu7xnLdSaHlMwL+ltmdtMep4s OZahCqQRyiziGopIwsDWxbBdfoGj4ZCIfoF8HvJ9XMUAEn5LMFJiYB6IfQ8S2p+n ssVVLp7tMM1bdik+JJ656+ZLB6BNq6yTM+jpxa+f5AY= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1682269913; x=1682356313; bh=7 PdXrdaoD6kEIopsF4MoThcfGdBk2BbxZuX4MQD6oZ0=; b=Jvim1924Hdr2/LDg5 58Je808SAvimDbjeiepK50gH60MoObgb2ao/Kd2sz3YkpPJ62crDiFsT3OG385pD 6hgLNNJs+W4l2syXWR+80fRpoJvou0MBCzo/YMZR9bbtgBBaHnqdFuh1umJeM3cA N7xIZ1LPS9G74OZ9jcKJOZ+Kgb2X7+R5tAlKFQK0fVidE1eCbOBowhUuyVVl410N ojIqFNoMbLT2R1Y6HgAuZMH2mM+LdNd3iNYqNxrXkDGYClXknFkJCy1DY1IVXVXg C6vI4+eUrrOEJBeFNT5wHsEqadpbM+Iimmua3O598+7cto2gq+HbLYXWTpF4fd7t GaJww== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffojghfggfgsedtke ertdertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpefhgeegteeitddvudduveeuhedvhe fhfeehgfehvdfhudegueekhedvhfffhffhgeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038@debbugs.gnu.org>; Sun, 23 Apr 2023 13:11:53 -0400 (EDT) From: Leo Famulari Date: Sun, 23 Apr 2023 13:11:47 -0400 Message-Id: <73266664797b0f620fef8447b61a42232e1ece65.1682269908.git.leo@famulari.name> X-Mailer: git-send-email 2.39.2 In-Reply-To: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> References: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/openldap.scm (389-ds-base)[inputs]: Replace httpd with ... [native-inputs]: ... httpd/pinned. [arguments]: Forbid keeping a reference to httpd/pinned. --- gnu/packages/openldap.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/openldap.scm b/gnu/packages/openldap.scm index 3f3015bd80..2d3a6d6274 100644 --- a/gnu/packages/openldap.scm +++ b/gnu/packages/openldap.scm @@ -268,6 +268,7 @@ (define-public 389-ds-base (guix build utils)) #:imported-modules `((guix build python-build-system) ,@%gnu-build-system-modules) + #:disallowed-references (list httpd/pinned) #:configure-flags #~(list "--enable-cmocka" (string-append "--with-db=" @@ -357,7 +358,6 @@ (define-public 389-ds-base cracklib cyrus-sasl gnutls - httpd icu4c iproute json-c @@ -388,6 +388,7 @@ (define-public 389-ds-base cmocka doxygen gettext-minimal + httpd/pinned libtool rsync pkg-config)) -- 2.39.2 From unknown Sun Aug 17 10:27:17 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#63038] [PATCH 5/5] gnu: mod-wsgi: Build with httpd/pinned. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 23 Apr 2023 17:13:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63038 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: 63038@debbugs.gnu.org Received: via spool by 63038-submit@debbugs.gnu.org id=B63038.16822699253337 (code B ref 63038); Sun, 23 Apr 2023 17:13:03 +0000 Received: (at 63038) by debbugs.gnu.org; 23 Apr 2023 17:12:05 +0000 Received: from localhost ([127.0.0.1]:46927 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFt-0000rf-Do for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:12:05 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:37873) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdFm-0000qA-OM for 63038@debbugs.gnu.org; Sun, 23 Apr 2023 13:11:59 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id AFA045C00D5; Sun, 23 Apr 2023 13:11:53 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Sun, 23 Apr 2023 13:11:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269913; x=1682356313; bh=m2CYS0TEQIrryyEbWyCkP95nTjUBidkZQQ4mb3piWfQ=; b= dzfqECWoL3rcSJ2n1mcFF+vRXsFnXCWBmOmMYgOgrWuS9qQYG7Qws8nmGJRZAzYB HpQltv67POHQ5i2qJ8JDj2paWAE2nGPL0E5HexNdqejarDZAROPiQoGX8n1cMyQ2 BeEd1MZ59YIW7z4vfIEcebV4yaLqQkAQ/i/5pJ1KKgQ= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1682269913; x=1682356313; bh=m 2CYS0TEQIrryyEbWyCkP95nTjUBidkZQQ4mb3piWfQ=; b=ZgVOZdLFMA8t9/L94 bRGaUblrmwUFRK5CfHvZd5cPFhg2P2oePqJrAxh48vWw3AG7wjpf6Q9HiMNtizaP VU6ZxSZ/hKpgPfzOFMjcHVwgMqfEgmqU28No+QlzSMiSKgnCQPBUT6FvTqyzxP4A 4fmaCzTnEevQNfZJk7ROkct77QMp0pjj7kay/5Y4kgvTg3kw0s7IaXhOrLJQrCEo VbImyxwdfnOwhWbz6boQ44KJYm0IKSkELTDaynX9M3EdtTx2isE60dB1/X0wVljo 8VWGXqvYhMRYdUfWTfcMmF4H42gm3gvNBdA9g8ZHc0hvVpphefLxhkgrwS6IK2x9 lgBaw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufffkffojghfggfgsedtke ertdertddtnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpefhgeegteeitddvudduveeuhedvhe fhfeehgfehvdfhudegueekhedvhfffhffhgeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038@debbugs.gnu.org>; Sun, 23 Apr 2023 13:11:53 -0400 (EDT) From: Leo Famulari Date: Sun, 23 Apr 2023 13:11:48 -0400 Message-Id: <47933c66001b7bb37e6ef63e39d2f317ef18c11c.1682269908.git.leo@famulari.name> X-Mailer: git-send-email 2.39.2 In-Reply-To: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> References: <3ddfb053e7baefefe88c560a41096d2e2aa7ed69.1682269908.git.leo@famulari.name> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) * gnu/packages/web.scm (mod-wsgi)[inputs]: Replace httpd with ... [native-inputs]: ... httpd/pinned. [arguments]: Forbid keeping a reference to httpd/pinned. --- gnu/packages/web.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index c8a1d0123e..07b567e0d1 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -335,14 +335,16 @@ (define-public mod-wsgi "1savh6h3qds20mwn1nqasmqzcp57pdhfc9v4b4k78d6q28y0r17s")))) (build-system gnu-build-system) (arguments - '(#:tests? #f ; TODO: can't figure out if there are tests + `(#:disallowed-references (,httpd/pinned) + #:tests? #f ; TODO: can't figure out if there are tests #:make-flags (list (string-append "DESTDIR=" (assoc-ref %outputs "out")) "LIBEXECDIR=/modules"))) + (native-inputs + `(("httpd" ,httpd/pinned))) (inputs - `(("httpd" ,httpd) - ("python" ,python-wrapper))) + `(("python" ,python-wrapper))) (synopsis "Apache HTTPD module for Python WSGI applications") (description "The mod_wsgi module for the Apache HTTPD Server adds support for running -- 2.39.2 From unknown Sun Aug 17 10:27:17 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Leo Famulari Subject: bug#63038: closed (Re: Apache HTTPD security update 2.4.57) Message-ID: References: X-Gnu-PR-Message: they-closed 63038 X-Gnu-PR-Package: guix-patches Reply-To: 63038@debbugs.gnu.org Date: Sun, 30 Apr 2023 08:50:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1682844602-19006-1" This is a multi-part message in MIME format... ------------=_1682844602-19006-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #63038: Apache HTTPD security update 2.4.57 which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 63038@debbugs.gnu.org. --=20 63038: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D63038 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1682844602-19006-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 63038-done) by debbugs.gnu.org; 30 Apr 2023 08:49:20 +0000 Received: from localhost ([127.0.0.1]:37176 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pt2kC-0004uo-Fg for submit@debbugs.gnu.org; Sun, 30 Apr 2023 04:49:20 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:49203) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pt2kA-0004uS-8p for 63038-done@debbugs.gnu.org; Sun, 30 Apr 2023 04:49:19 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id CB0245C00F7; Sun, 30 Apr 2023 04:49:12 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 30 Apr 2023 04:49:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682844552; x=1682930952; bh=f9EyySUQBe1kg82N6ZpIvN XE3NdwSp53aheM90wpbA4=; b=laoSgfpuMFi6O9MNOCQh6OIskUtgFDszGiRJF1 ZHGetDqYIPKqLjd+rvKVU2cZb+hz7eE/e4NlDsS8Fiz8IQbpBznruqF8czyWv+lJ ZORgT8q6KJOEOV2KZHrUkJPz4iMkenuxsOmmXBsxTozwJE7xCLGUPqJ83vnuzqzb 5tNVE= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1682844552; x=1682930952; bh=f9EyySUQBe1kg82N6ZpIvNXE3NdwSp53ahe M90wpbA4=; b=SE+ykgL6BmMWsTqlCuQIUzhVC4ge+JVktaDAj3b4acLYx6J5cyZ 2algqHjv0bfjSQgz7UL9IJ61AcLaOeF/4OnXLzH7Zy1BhwIN20e4X4nS4Oz7bgeb v8mD0p6y+BlYvNWQwtVj3Axvf3hPp04BVhf22EJc5tMJXlG9o1/ihfGfuyy+3hs2 Ki0AlWKPJIm0x1aIGn1yf42irDWqY6LriL1/q6QchZs0thoBAkRla3mgjcvuyq1a fsgUxthmtjuK+5wthDDTsfV6DeGk2IGcI281Xuh/z7wTb3sILfgITm5e/SPJCZFA BydO0ozoLWjdpUQlR/brCKUUP6+vMI5ByLg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedvvddgtdelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkgggtugesthdtredttd dtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhi rdhnrghmvgeqnecuggftrfgrthhtvghrnhepffehtdeffedtvdeuieefudeujedvkeehff euieejgfdvteelgeehgeefheehuddunecuvehluhhsthgvrhfuihiivgeptdenucfrrghr rghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for <63038-done@debbugs.gnu.org>; Sun, 30 Apr 2023 04:49:12 -0400 (EDT) Date: Sun, 30 Apr 2023 04:49:09 -0400 From: Leo Famulari To: 63038-done@debbugs.gnu.org Subject: Re: Apache HTTPD security update 2.4.57 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 63038-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Pushed as 3b3c7ef1f74d15471da482ca9b3720020c9f85f1 ------------=_1682844602-19006-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 23 Apr 2023 17:09:32 +0000 Received: from localhost ([127.0.0.1]:46889 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdDP-0000kv-GB for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:09:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:40222) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pqdDJ-0000kb-8E for submit@debbugs.gnu.org; Sun, 23 Apr 2023 13:09:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pqdDH-0007C8-Mx for guix-patches@gnu.org; Sun, 23 Apr 2023 13:09:23 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pqdDG-0003G9-4X for guix-patches@gnu.org; Sun, 23 Apr 2023 13:09:23 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 445485C0087; Sun, 23 Apr 2023 13:09:19 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 23 Apr 2023 13:09:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:sender:subject:subject:to:to; s=mesmtp; t=1682269759; x=1682356159; bh=USVg/7wueivmzk3sre3J9e 1XDhTF0mwDIKvOaOt2owg=; b=QKDFtkyDMJF3VG9JuOnnRuAWa1mVEDOfN+iof9 CEiHA3l56Q/aUxrrWCX/nqi6VmZeEsjCitpTKkH7fRFcFkG8aJwVzXR8WcZ6Y8KS 9UIUl6NJ8DveHjlHff0oYezbGoelIXsFWJ5KB8BvopPjKcdry/SabXtHFf0Qv4Q9 uktvA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1682269759; x=1682356159; bh=USVg/7wueivmzk3sre3J9e1XDhTF0mwDIKv OaOt2owg=; b=cVAZ6HeellxtPeCe6gY1vrxEYc0CJu1SgR8akAoG52z3H/x4q7v u5AYuhVOrctl+lhAW3MM2wnGo0gLB1zIcP14CVvwTiCKpHuKrtIZixBbxTG04TWC xNwgRC+gvI32MINn2i+X6jhKy4zsWZxzmJEx+uhDdExYPEkUZHdjSLGnR/89BqJm rIEgoPJW2TCvL2pwKxGAzSob+Yz81cfAP7LXL6AbErob9smvPt/9HNGy89DO6JkT QfiENJ9qnpmzlSqqtXgjojRnRvkEKBbQ5V4zdwhuFfRstr31bMGLpOiQz31IawVj r8jE4WMG/BKrcBqQQYZuakrkjM8JacVv64A== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrfedtkedguddutdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfggtggusehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeffhedtfeeftddvueeifeduueejvdekhe ffueeijefgvdetleegheegfeehheduudenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sun, 23 Apr 2023 13:09:18 -0400 (EDT) Date: Sun, 23 Apr 2023 13:09:12 -0400 From: Leo Famulari To: guix-patches@gnu.org Subject: Apache HTTPD security update 2.4.57 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Received-SPF: pass client-ip=66.111.4.27; envelope-from=leo@famulari.name; helo=out3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Here are patches to update HTTPD to the latest upstream release, 2.4.57. These patches also remove a bunch of spurious dependencies on the primary httpd package by creating a pinned variant. With these changes, we'll be able to update HTTPD freely without triggering thousands of rebuilds. ------------=_1682844602-19006-1--