GNU bug report logs -
#66662
References to ungrafted glibc retained
Previous Next
Reported by: Ludovic Courtès <ludo <at> gnu.org>
Date: Sat, 21 Oct 2023 08:31:01 UTC
Severity: important
Tags: security
Done: Ludovic Courtès <ludo <at> gnu.org>
Bug is archived. No further changes may be made.
To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 66662 in the body.
You can then email your comments to 66662 AT debbugs.gnu.org in the normal way.
Toggle the display of automated, internal messages from the tracker.
Report forwarded
to
bug-guix <at> gnu.org
:
bug#66662
; Package
guix
.
(Sat, 21 Oct 2023 08:31:01 GMT)
Full text and
rfc822 format available.
Acknowledgement sent
to
Ludovic Courtès <ludo <at> gnu.org>
:
New bug report received and forwarded. Copy sent to
bug-guix <at> gnu.org
.
(Sat, 21 Oct 2023 08:31:01 GMT)
Full text and
rfc822 format available.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
As discussed while reviewing the now-applied glibc replacement at
<https://issues.guix.gnu.org/66348>, I stumbled upon a case where a
package still refers to a ungrafted glibc in addition to the grafted
one:
--8<---------------cut here---------------start------------->8---
$ guix gc -R $(guix build libreoffice) | grep glibc-2.35
/gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
/gnu/store/ln6hxqjvz6m9gdd9s97pivlqck7hzs99-glibc-2.35
$ guix build -e '(@@ (gnu packages commencement) glibc-final)'
/gnu/store/gd0x2az3a0sgj5aa9fbv201g7wwfj5m7-glibc-2.35-debug
/gnu/store/ln6hxqjvz6m9gdd9s97pivlqck7hzs99-glibc-2.35
/gnu/store/i2g0is6wjq3ccs6m1l6w9mhf44k4042h-glibc-2.35-static
$ guix build -e '(@@ (gnu packages commencement) glibc-final)' --no-grafts
/gnu/store/0lzva77yj6hddmhasia65krknyi8kxsg-glibc-2.35-debug
/gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
/gnu/store/l0yryi5jsa1grnvw01c9nkz9c81cv224-glibc-2.35-static
$ guix describe
Generation 277 Oct 16 2023 23:15:43 (current)
guix b437896
repository URL: https://git.savannah.gnu.org/git/guix.git
branch: master
commit: b437896e87a51cc610388d4c462893652dd773e6
--8<---------------cut here---------------end--------------->8---
The path to the ungrafted libc goes like this:
--8<---------------cut here---------------start------------->8---
$ guix graph --path -t references $(guix build libreoffice) /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
/gnu/store/n8y9jk8wnvxxg54g19ds0jf5agiv5vs2-libreoffice-7.5.4.2
/gnu/store/y392yldk4pbk4z5q587bz5n61hzbcf4g-mariadb-10.10.2-dev
/gnu/store/cilkyfnc5fxmpviyypci3d2881ik3nih-mariadb-10.10.2-lib
/gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
--8<---------------cut here---------------end--------------->8---
Similar problem with GIMP:
--8<---------------cut here---------------start------------->8---
$ guix gc -R $(guix build gimp) | grep glibc-2.35
/gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
/gnu/store/ln6hxqjvz6m9gdd9s97pivlqck7hzs99-glibc-2.35
$ guix graph --path -t references $(guix build gimp |grep -v doc) /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
/gnu/store/fw40cg57p0ycggrf8qvhl116257c5vv7-gimp-2.10.32
/gnu/store/mhfdl59lwhv4nh5kd4pnrh8jjls6976w-exiv2-0.27.5
/gnu/store/47xjz7g247yrnfxbkpr0hi81cqkrlvdn-gcc-11.3.0
/gnu/store/930nwsiysdvy2x5zv1sf6v7ym75z8ayk-gcc-11.3.0-lib
/gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
--8<---------------cut here---------------end--------------->8---
Ludo’.
Severity set to 'important' from 'normal'
Request was from
Ludovic Courtès <ludo <at> gnu.org>
to
control <at> debbugs.gnu.org
.
(Sat, 21 Oct 2023 08:37:02 GMT)
Full text and
rfc822 format available.
Added tag(s) security.
Request was from
Ludovic Courtès <ludo <at> gnu.org>
to
control <at> debbugs.gnu.org
.
(Sat, 21 Oct 2023 08:37:02 GMT)
Full text and
rfc822 format available.
Reply sent
to
Ludovic Courtès <ludo <at> gnu.org>
:
You have taken responsibility.
(Fri, 27 Oct 2023 23:40:01 GMT)
Full text and
rfc822 format available.
Notification sent
to
Ludovic Courtès <ludo <at> gnu.org>
:
bug acknowledged by developer.
(Fri, 27 Oct 2023 23:40:02 GMT)
Full text and
rfc822 format available.
Message #14 received at 66662-done <at> debbugs.gnu.org (full text, mbox):
Ludovic Courtès <ludo <at> gnu.org> skribis:
> As discussed while reviewing the now-applied glibc replacement at
> <https://issues.guix.gnu.org/66348>, I stumbled upon a case where a
> package still refers to a ungrafted glibc in addition to the grafted
> one:
>
> $ guix gc -R $(guix build libreoffice) | grep glibc-2.35
> /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
> /gnu/store/ln6hxqjvz6m9gdd9s97pivlqck7hzs99-glibc-2.35
> $ guix build -e '(@@ (gnu packages commencement) glibc-final)'
> /gnu/store/gd0x2az3a0sgj5aa9fbv201g7wwfj5m7-glibc-2.35-debug
> /gnu/store/ln6hxqjvz6m9gdd9s97pivlqck7hzs99-glibc-2.35
> /gnu/store/i2g0is6wjq3ccs6m1l6w9mhf44k4042h-glibc-2.35-static
> $ guix build -e '(@@ (gnu packages commencement) glibc-final)' --no-grafts
> /gnu/store/0lzva77yj6hddmhasia65krknyi8kxsg-glibc-2.35-debug
> /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
> /gnu/store/l0yryi5jsa1grnvw01c9nkz9c81cv224-glibc-2.35-static
> $ guix describe
> Generation 277 Oct 16 2023 23:15:43 (current)
> guix b437896
> repository URL: https://git.savannah.gnu.org/git/guix.git
> branch: master
> commit: b437896e87a51cc610388d4c462893652dd773e6
>
>
> The path to the ungrafted libc goes like this:
>
> $ guix graph --path -t references $(guix build libreoffice) /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
> /gnu/store/n8y9jk8wnvxxg54g19ds0jf5agiv5vs2-libreoffice-7.5.4.2
> /gnu/store/y392yldk4pbk4z5q587bz5n61hzbcf4g-mariadb-10.10.2-dev
> /gnu/store/cilkyfnc5fxmpviyypci3d2881ik3nih-mariadb-10.10.2-lib
> /gnu/store/gsjczqir1wbz8p770zndrpw4rnppmxi3-glibc-2.35
Fixed in 67effc1560fc175dfbcb58ef5b965b08b3942d6c, which actually
removes a few lines of code in grafts.scm.
Ludo’.
bug archived.
Request was from
Debbugs Internal Request <help-debbugs <at> gnu.org>
to
internal_control <at> debbugs.gnu.org
.
(Sat, 25 Nov 2023 12:24:10 GMT)
Full text and
rfc822 format available.
This bug report was last modified 1 year and 205 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.