From unknown Sat Sep 20 07:49:31 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#71729 <71729@debbugs.gnu.org> To: bug#71729 <71729@debbugs.gnu.org> Subject: Status: Emacs 29.4 emergency bugfix release Reply-To: bug#71729 <71729@debbugs.gnu.org> Date: Sat, 20 Sep 2025 14:49:31 +0000 retitle 71729 Emacs 29.4 emergency bugfix release reassign 71729 guix submitter 71729 Adam Porter severity 71729 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Sat Jun 22 20:54:36 2024 Received: (at submit) by debbugs.gnu.org; 23 Jun 2024 00:54:36 +0000 Received: from localhost ([127.0.0.1]:37995 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLBV6-00064i-An for submit@debbugs.gnu.org; Sat, 22 Jun 2024 20:54:36 -0400 Received: from lists.gnu.org ([209.51.188.17]:57772) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLBV4-00064Y-A0 for submit@debbugs.gnu.org; Sat, 22 Jun 2024 20:54:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sLBSx-0003xr-Kr for bug-guix@gnu.org; Sat, 22 Jun 2024 20:52:23 -0400 Received: from duck.cedar.relay.mailchannels.net ([23.83.210.52]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sLBSv-00077s-QK for bug-guix@gnu.org; Sat, 22 Jun 2024 20:52:23 -0400 X-Sender-Id: dreamhost|x-authsender|adam@alphapapa.net Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 752A5762970 for ; Sun, 23 Jun 2024 00:52:18 +0000 (UTC) Received: from pdx1-sub0-mail-a295.dreamhost.com (unknown [127.0.0.6]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 1B7F5762878 for ; Sun, 23 Jun 2024 00:52:18 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1719103938; a=rsa-sha256; cv=none; b=qiPjzm7fw2YzarjjwszMiMAxk9BPFbuRo4U1UgK3ik+ys9pjE2eC3WDcGpGq75sKu/KCpt e9mttd3vSSIlOVIUXtavHvA6oNla2Bg+kue3Cn+leaTNppFj012zq/QwHGkUVG0ByCRQ8P SpSlYJ5q5VRVmGoWosOg+ZddAE/jiAXm8Cqx3aSRjQk6zLdlxdAE3ZXhdgFjsacAet9XHl KvZuXmdDZfzlRHExEhcRGu1fvni5fRtPljov86eztxQmBYxsyYvq8aroofQr8CyiP4RqI8 9L41ahpbK0WJwL+zLzydxuQaA1oNa2KdddkIeMgFcEqSZWa9KYOrc3uwh+Qf0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1719103938; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=gER/0fuQ0H7/eTeuK4Ou7smSHA534YDmAxOXAUe0raI=; b=E6qv8P3SXORutuz1Hgl8eR8Ye4zVQi5OjiaVsJvM2pla/4jc+omLUwpAHSrEyaJXcqYw6t KzM65yMWex0XckvAYSUERyfgUaHJVLUihib4z6wu+DfECxCvMSE1DogK1gjpCCQCOmn668 oEbKV2s3RQxV+YmCDOwKTfu6DIGHJBdR3hl8qhwDnOxIfqVrAEWuJvls2EHqg+3w52R5MS UujqOqsAK0uOp+nOcTuvR8Zlqr7k+Tw6dYS0BwCNX/H/f+ojBHMjYJXwL8tAHqB8Uui4Pm 31j8pnAVrI2Wygd2l1CkYkpuPDim8I8qxvZOV+drbZS515UxNNf+V3heftMqZw== ARC-Authentication-Results: i=1; rspamd-7f76976655-wwn5b; auth=pass smtp.auth=dreamhost smtp.mailfrom=adam@alphapapa.net X-Sender-Id: dreamhost|x-authsender|adam@alphapapa.net X-MC-Relay: Junk X-MailChannels-SenderId: dreamhost|x-authsender|adam@alphapapa.net X-MailChannels-Auth-Id: dreamhost X-Thread-Minister: 26dedce14ee00e48_1719103938321_3241728207 X-MC-Loop-Signature: 1719103938321:1494007782 X-MC-Ingress-Time: 1719103938321 Received: from pdx1-sub0-mail-a295.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.108.35.150 (trex/6.9.2); Sun, 23 Jun 2024 00:52:18 +0000 Received: from [10.17.178.125] (unknown [172.98.33.7]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: adam@alphapapa.net) by pdx1-sub0-mail-a295.dreamhost.com (Postfix) with ESMTPSA id 4W6CH55hDPzCv for ; Sat, 22 Jun 2024 17:52:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alphapapa.net; s=dreamhost; t=1719103937; bh=gER/0fuQ0H7/eTeuK4Ou7smSHA534YDmAxOXAUe0raI=; h=Date:To:From:Subject:Content-Type:Content-Transfer-Encoding; b=SvugQ5SHNQXrBfbtGy7F7WjzQTGf7mOnyv9rk48tkwaTinfjiW+2QwB3oeoSSAo+9 CYo690FQxEsl7H51IClPCHriOguX+SwB7eLDQG5io7YnrzAyqZSVsbIZQ/6ffq+BYO wtgfoS5X15g0TVbz0HzBcupUKrevqSH01xDyxYwRmlBeL9szR71U3UhzZtzish/GR7 g1FvS1dHKy3Z1VVtfeiFcmG/mwoiwAhr2ziFUHn5sBdrzvxR36zR6psVAdAqT15WFN HCI4HytpsUMbr2VtVB94Zus8Qep7BUiNK/SUtTfbnaXByGWEFOFEyjTwbjf5jDee8O uMOPnX0w9B+KA== Message-ID: Date: Sat, 22 Jun 2024 19:52:16 -0500 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: bug-guix@gnu.org From: Adam Porter Subject: Emacs 29.4 emergency bugfix release Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: neutral client-ip=23.83.210.52; envelope-from=adam@alphapapa.net; helo=duck.cedar.relay.mailchannels.net X-Spam_score_int: -12 X-Spam_score: -1.3 X-Spam_bar: - X-Spam_report: (-1.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.779 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.7 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.7 (--) Hello, Today an emergency bugfix release was made of Emacs v29.4. It fixes an important security vulnerability. FWIW, I had hoped that I could install it by running: guix install --with-version=emacs=29.4 emacs But that fails the validate-comp-integrity phase, showing that all of its tests fail, with every function being loaded in byte-compiled form instead of native-compiled. And despite my best efforts at comparing the emacs.git tags for 29.3 and 29.4 to look for any relevant changes, and digging through the relevant source code, and scanning through the build logs, I can't find a cause for this problem. Is this failure expected? If so, is it something unique to the Emacs packaging, and could it be fixed? (Before Emacs 28 was released, I was able to use a similar "--with-commit" option to build and install what was then the emacs-next package to get native-compilation support, keeping it updated with Emacs's master branch at the time. It would be helpful if that could still be used by users rather than having to wait for an update to the package definition, especially in a case like this.) Thanks for your work on Emacs in Guix. --Adam From debbugs-submit-bounces@debbugs.gnu.org Sun Jun 23 04:40:28 2024 Received: (at 71729-done) by debbugs.gnu.org; 23 Jun 2024 08:40:29 +0000 Received: from localhost ([127.0.0.1]:50091 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLIlw-0007Gm-Bp for submit@debbugs.gnu.org; Sun, 23 Jun 2024 04:40:28 -0400 Received: from mail-wm1-f67.google.com ([209.85.128.67]:54298) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sLIlu-0007GO-I0 for 71729-done@debbugs.gnu.org; Sun, 23 Jun 2024 04:40:27 -0400 Received: by mail-wm1-f67.google.com with SMTP id 5b1f17b1804b1-424900a9b05so446055e9.0 for <71729-done@debbugs.gnu.org>; Sun, 23 Jun 2024 01:40:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1719131960; x=1719736760; darn=debbugs.gnu.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id:from:to:cc:subject:date :message-id:reply-to; bh=9x00BfquYcXE5zgEzPUq/HqTm2zY3WFvcHdiDechyzQ=; b=h070Hu8GxoKUgOtxcu3ikjQoA00DFxGsvmm4ziJ4Wq6JgFhGQmOhBy5tTynMijb6Ro q66oXfj1qaVwjUAdSuMmrW0qep8ePBhqleRlH2TXFYbDBaKwc4pC2VQmn0ZOLqwdAK8D kjaKfAJec7gpKmX83pzT/lAJUBhLvGSJg1X7tQtCkf/QOXu23amkBYEI63t7gmkaFm5O QkEhoRILbmvbpaNBHDNmnEwMxD7TVkS6JkIB31ApkUtd6zfJFI05o4713mcwKFudxexy dpHpy29s+GTK+8O3hcfEDvTdwpl/o5+kj9Zncugq0omtPJsxtSgE6M9Pof/r2eEQt72X a1lA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719131960; x=1719736760; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=9x00BfquYcXE5zgEzPUq/HqTm2zY3WFvcHdiDechyzQ=; b=SNK6g34viGMi1rgst6Xy915ZCUD83/dedAMQeGH6D9yjWUKvXYMMyws1ePf6dvVFiL JO0paXf7/fHhG4mL/PSHNKVYE14RC3Cfw439pFzsdqTi72BRKKn2ocek12yA2eEwg/ix FbLdO7Mvjx7f8DXqbNQhpDFvX7kqqrYChb2TledXP5Uu4ocvdCcL+RHMFgMe9TEhDuLz MXtc/08ajl/6B5PnMdgwBNDGgn+g4+jNa3IudO8isCxN8pZcS4ZkHzdg3tCD/GgoRPA1 uO++qxsuOv9G1MRk7qArWIhmb6zVOPTlk+laPnsHS1LSfFX/wytfcfT5pK3m1TLehGgE 8m8Q== X-Forwarded-Encrypted: i=1; AJvYcCUmnCXnmprbcSzx1Edkcll3LaGkQPfdTUCwONTBVflfzqAh+LyF6a8aL27sp9mphPcj7ihdbE5GCBo/i/kIYdgg+ej3ju94+1E1kg== X-Gm-Message-State: AOJu0YwMsTohSABCdCX1f0WuyuVG4gfvgZcyVejC0Z7Jz7xMXWfjWh6g PNtRee+NAXPFSP3Fw2xDgXXXSHEs+5G6P/GFEHTCXhZYyRkwosJO0FPfNoc2 X-Google-Smtp-Source: AGHT+IEw2gZdzrh+Poo/J41KZzT3jrfJilICJ/kOLrGSU4djOXbOsQQi+IrNE4k/2tcFqo5zPPKNRQ== X-Received: by 2002:a05:600c:354f:b0:421:f346:6af6 with SMTP id 5b1f17b1804b1-4248cc5864dmr10337755e9.26.1719131959939; Sun, 23 Jun 2024 01:39:19 -0700 (PDT) Received: from lumine.fritz.box (85-127-52-93.dsl.dynamic.surfer.at. [85.127.52.93]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4247d2190desm130651475e9.48.2024.06.23.01.39.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 23 Jun 2024 01:39:19 -0700 (PDT) Message-ID: Subject: Re: Emacs 29.4 emergency bugfix release From: Liliana Marie Prikler To: Adam Porter , 71729-done@debbugs.gnu.org Date: Sun, 23 Jun 2024 10:39:18 +0200 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 71729-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Am Samstag, dem 22.06.2024 um 19:52 -0500 schrieb Adam Porter: > Hello, >=20 > Today an emergency bugfix release was made of Emacs v29.4.=C2=A0 It fixes > an important security vulnerability. Note: Security bugs should go to guix-security instead. But thanks for pointing out the new Emacs release, I've pushed an update. (Thus marking this done) > FWIW, I had hoped that I could install it by running: >=20 > =C2=A0=C2=A0 guix install --with-version=3Demacs=3D29.4 emacs >=20 > But that fails the validate-comp-integrity phase, showing that all of > its tests fail, with every function being loaded in byte-compiled > form instead of native-compiled. Ah, yes, that is not something you can do with --with-version, as it disregards our patches and everything. > And despite my best efforts at comparing the emacs.git tags for 29.3 > and 29.4 to look for any relevant changes, and digging through the > relevant source code, and scanning through the build logs, I can't > find a cause for this problem. >=20 > Is this failure expected?=C2=A0 If so, is it something unique to the Emac= s > packaging, and could it be fixed?=C2=A0 (Before Emacs 28 was released, I > was able to use a similar "--with-commit" option to build and install > what was then the emacs-next package to get native-compilation > support, keeping it updated with Emacs's master branch at the time.=C2=A0 > It would be helpful if that could still be used by users rather than > having to wait for an update to the package definition, especially in > a case like this.) I understand your pain, but I doubt there is a reasonable fix to this. Perhaps the check should honour tests?, but then you'd disable all the other tests as well as part of the build. Maybe a --without-phase option to the Guix CLI would be better? As for how to work around this, you can do a more elaborate package definition: (package (inherit emacs) (version NEW_VERSION) (source (origin (inherit (package-source emacs)) (uri NEW_URI)))) This should automatically apply our patches. Or, you can locally run `guix refresh -u emacs'. Cheers From debbugs-submit-bounces@debbugs.gnu.org Wed Jun 26 10:21:03 2024 Received: (at 71729) by debbugs.gnu.org; 26 Jun 2024 14:21:03 +0000 Received: from localhost ([127.0.0.1]:40057 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMTWB-0004kV-I9 for submit@debbugs.gnu.org; Wed, 26 Jun 2024 10:21:03 -0400 Received: from fout1-smtp.messagingengine.com ([103.168.172.144]:42973) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMTW9-0004ju-GJ for 71729@debbugs.gnu.org; Wed, 26 Jun 2024 10:21:02 -0400 Received: from compute7.internal (compute7.nyi.internal [10.202.2.48]) by mailfout.nyi.internal (Postfix) with ESMTP id AB6401380177; Wed, 26 Jun 2024 10:20:53 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute7.internal (MEProxy); Wed, 26 Jun 2024 10:20:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=mesmtp; t=1719411653; x=1719498053; bh=yNKZ62P +T/SCeqSaiK5IDbXYUPsUCvF17MWgZ0+NIaA=; b=MLLI5ekClWKec15FedMB7yJ z3nw57iw0MvK4aROyWz7tCQn4f2cN1LIZ9ajk86nTo46rTj8BolpejVcelzeUWKJ +/Sa5Aa5ERQ/LU/14Qli8yvXTla/vEsePRAaMZJlMmWGSB8TE9xoi5NV+swcKKpq nR7YqphxLtzx2jTSYJJs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm2; t=1719411653; x=1719498053; bh=yNKZ62P+T/SCeqSaiK5IDbXYUPsU CvF17MWgZ0+NIaA=; b=vG23zzIyv6DY3YW5wYYMp0vw9hQmtKyOn19FcY2XUIJs R0pde9xFZVGB3DSr9A+s1ZnA78/QgyjakeLmXJ0/bLuvCebGZLhMIegbtI97mjnG DKF6JfGh5McQJHkuw13T56S2gpuo4sOnQ+mExlwfZ0gr5T7KPMgxB43AVnyJI2Xb PQBVvT12oiDBOfy0eqFmuYLUBX6kD6Ytrmn/ci5RX1a2v+dXX/TAtVwgPo1vgTGJ 0LNmzg/GzZOfW/lornsLFA4HQf3TdqHLLyiMeXXl4Yz8dzdknUq74Aa32LcAP6W2 tJNHwMB55odOuV6nC/5xR3K1p3+d/Wo4EOpLM1V2tg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeftddrtddvgdejiecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjsehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeeukeektdffvddtudegjeegtdevhfeufe eivdejiedtieegtdevjedvjeehffevgfenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 26 Jun 2024 10:20:52 -0400 (EDT) Date: Wed, 26 Jun 2024 10:20:51 -0400 From: Leo Famulari To: 71729@debbugs.gnu.org, liliana.prikler@gmail.com, adam@alphapapa.net Subject: Re: bug#71729: Emacs 29.4 emergency bugfix release Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 71729 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Sun, Jun 23, 2024 at 10:39:18AM +0200, Liliana Marie Prikler wrote: > Note: Security bugs should go to guix-security instead. But thanks for > pointing out the new Emacs release, I've pushed an update. (Thus > marking this done) I think that only secret security bugs should go to guix-security, unless the policy has changed. Public issues should go to bug-guix. From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 09:57:31 2024 Received: (at 71729) by debbugs.gnu.org; 27 Jun 2024 13:57:31 +0000 Received: from localhost ([127.0.0.1]:42991 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMpcw-0002Gr-Ju for submit@debbugs.gnu.org; Thu, 27 Jun 2024 09:57:31 -0400 Received: from cyan.elm.relay.mailchannels.net ([23.83.212.47]:20185) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMpct-0002Gh-EE for 71729@debbugs.gnu.org; Thu, 27 Jun 2024 09:57:29 -0400 X-Sender-Id: dreamhost|x-authsender|adam@alphapapa.net Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 9700176194D; Thu, 27 Jun 2024 13:57:22 +0000 (UTC) Received: from pdx1-sub0-mail-a271.dreamhost.com (unknown [127.0.0.6]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 3BFD1761B68; Thu, 27 Jun 2024 13:57:22 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1719496642; a=rsa-sha256; cv=none; b=CBhLtfEQRN8fBFnYbDLDrNaDuIYSMwVXqy7Aw7s5vm1WAQFyPwo4KbsUMH1wfdkBhvANWZ 4MzZMKo4mNwtUjNUX6tw2e5Pa2zTlK9SB50srRlk6t9Ym1ZdRp9nbCx36Iz8SaMzVMAqrr 24yBchyZVavsgY9SLvotyvZp3XvRgIZx/N/1amy/ukTUOLX9dgC2+GB55LkWoQhgyGxwq9 QKmnc2tJOWJrWYIh8njJyHLeGf1iUdEGeOSlMFbCS+U4BHKT0wfI3HahJk+800cALZ9aCr edK5SqelffDtTDIeUYCPcbvrR6gewBO8YVa8unwqHDd9HhBN5gDyI9d00YvYYg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1719496642; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=SfPanH0q8jV4xYa/phG+HoG/EjE3igIfUYCudKJRTlw=; b=89+RCzFwRC4beJb1e6j+UokFZsYD0w92RmZAlUa60LLbNianwks6VAM2pre4SWrsFLdAgS v7p4MmHh2AxEGY19mXdv7BM3664mXQ2xzpGJMwKUrAUlBxz1CCsxY28pGBwDUMWQxJQNLM sDl1jTFJ/j9dHM+26na+0CndPQtea5ixoW8SoB9QUapn7XXIVeUetgEudXohDWj6S1Xxm+ gFjk7UArPSuvbQ6t17zeDtaOHnXOhEtsdk3jbIu21T5DhcqQqCa1359xTLHWkOP91rjBDs wlVB43D08XPRUOQrZdcAG6w+efRp/6kGFNa2ZeYaCDZHVCRrZwRZ88z0IU20oA== ARC-Authentication-Results: i=1; rspamd-7f76976655-jxtwn; auth=pass smtp.auth=dreamhost smtp.mailfrom=adam@alphapapa.net X-Sender-Id: dreamhost|x-authsender|adam@alphapapa.net X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|adam@alphapapa.net X-MailChannels-Auth-Id: dreamhost X-Inform-Little: 6259264850740dd7_1719496642484_1684003275 X-MC-Loop-Signature: 1719496642484:2730230747 X-MC-Ingress-Time: 1719496642484 Received: from pdx1-sub0-mail-a271.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.118.105.142 (trex/6.9.2); Thu, 27 Jun 2024 13:57:22 +0000 Received: from [10.66.43.177] (unknown [91.193.232.98]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: adam@alphapapa.net) by pdx1-sub0-mail-a271.dreamhost.com (Postfix) with ESMTPSA id 4W90W55H5Cz2f; Thu, 27 Jun 2024 06:57:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alphapapa.net; s=dreamhost; t=1719496642; bh=SfPanH0q8jV4xYa/phG+HoG/EjE3igIfUYCudKJRTlw=; h=Date:Subject:To:From:Content-Type:Content-Transfer-Encoding; b=fGNc1XqM913whKPZHq5ZaVMgCpydrQvd4Yil6C26Tpkxm1klYactnc+zW1G39cTG5 uXyBtuqVAijgCF/4SM4hPl/UPqTLI0qh5+kmWYaXgSocs2Y/Z6d72MO8r1ewXG3Zcl yRSfkQisKhgoCWzzJ77VUluKXrugil/IzGGQiD89zmUFUp1C89K0n93c8GCwUs4YRz jM8U0HuGSeDa9o7K8mZryoTYzk+uhZWhvJg2EXGBa99aQjewT1cQ+w4PksONEQF7f6 +hrPRuQDwEnY39kgGP39S8ISL6xWffpUBcBjo79pSLdJNP2ozK5ZrJv0iZYORAhj09 /PS2vMtdwjBBQ== Message-ID: Date: Thu, 27 Jun 2024 08:57:20 -0500 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Emacs 29.4 emergency bugfix release To: Liliana Marie Prikler , 71729@debbugs.gnu.org References: Content-Language: en-US From: Adam Porter In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Score: 0.6 (/) X-Debbugs-Envelope-To: 71729 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.4 (/) Hi Liliana, On 6/23/24 03:39, Liliana Marie Prikler wrote: > Am Samstag, dem 22.06.2024 um 19:52 -0500 schrieb Adam Porter: >> Hello, >> >> Today an emergency bugfix release was made of Emacs v29.4.  It fixes >> an important security vulnerability. > Note: Security bugs should go to guix-security instead. But thanks for > pointing out the new Emacs release, I've pushed an update. (Thus > marking this done) Thanks. If I may ask here, as it seems relevant and might help other users in the future: A few minutes ago I ran "guix pull", but after it finished, "guix show emacs" still shows: name: emacs version: 29.3 Am I missing something? e.g. the equivalents in Debian, like "apt show emacs" or "apt policy emacs", show both installed and available versions. So as a user, how am I to know whether I'm using the latest version of a package? I also tried "guix upgrade -n" (which updates substitute lists from the network, which can significantly delay its finishing for a simple check like this), and it shows: The following packages would be upgraded: emacs (dependencies or package changed) But maybe that's affected by the workaround I'm using (see below). >> FWIW, I had hoped that I could install it by running: >> >>    guix install --with-version=emacs=29.4 emacs >> >> But that fails the validate-comp-integrity phase, showing that all of >> its tests fail, with every function being loaded in byte-compiled >> form instead of native-compiled. > Ah, yes, that is not something you can do with --with-version, as it > disregards our patches and everything. Ah, I wish I had known that. FWIW, looking at , I can't even find "--with-version" documented at all. But besides that, none of them seem to explain that such options may discard parts of the package definition, such as patches (if any of those other options do--is it only "--with-version" that does?). Does a documentation bug need to be filed about this? > As for how to work around this, you can do a more elaborate package > definition: > > (package > (inherit emacs) > (version NEW_VERSION) > (source (origin (inherit (package-source emacs)) > (uri NEW_URI)))) > > This should automatically apply our patches. Or, you can locally run > `guix refresh -u emacs'. Thanks for the pointer. I defined a package called "emacs-jit" (and a corresponding "emacs-minimal-jit") that comments out the JIT-disabling patches, so that I can still JIT-compile packages installed through Emacs, and it seems to be working fine. Would you be willing to accept some kind of package definition like that being added to Guix, as an alternative to the main "emacs" package? (I won't quibble over the name.) I think that there are a significant number of users who would like to use Guix to keep Emacs up-to-date without sacrificing the ability to native-compile packages installed from within Emacs. It would be nice to have this in Guix so that I wouldn't have to manually update the package definition according to upstream changes. Thanks, Adam From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 27 16:31:38 2024 Received: (at 71729) by debbugs.gnu.org; 27 Jun 2024 20:31:38 +0000 Received: from localhost ([127.0.0.1]:43466 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMvmL-0003nw-KR for submit@debbugs.gnu.org; Thu, 27 Jun 2024 16:31:38 -0400 Received: from mail-ed1-f65.google.com ([209.85.208.65]:42112) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sMvmJ-0003nh-NF for 71729@debbugs.gnu.org; Thu, 27 Jun 2024 16:31:36 -0400 Received: by mail-ed1-f65.google.com with SMTP id 4fb4d7f45d1cf-57d106e69a2so642061a12.0 for <71729@debbugs.gnu.org>; Thu, 27 Jun 2024 13:31:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1719520226; x=1720125026; darn=debbugs.gnu.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id:from:to:cc:subject:date :message-id:reply-to; bh=TJ/Fgboai8OxwPi87QhAS1AB6bRixM+lpbCRCEM/5oQ=; b=YiuN2/DO1nS+6iErJwM1RT09RC4IVh5H7O0ni0kNGhK0nZY6iPPRKhiTnUZs6qBBsw wJ6GauSo0pELs63J450TpNQMqse6Kh5vktJ6RTEdsM+dEzLKayALc7BTjXhNBWzTGDm7 yYn+M376diHPifU6K40nRJDPrPc/UcWU1MmkqoORQYk2aFJGQCEh2bXtvBwErpK+US2h wzfpbL4ZVia71TPcV3NHhWApV5yp+1D1Fh6wn+FjEK4DRBxX1abuYrGm54EMT4Y51Lj1 uiXI/ekFdZSXOmjhmBtl9VZRBKOto8CUG0PUnRLVh9wvNm6PZGi9QWeefjZD/j5pdQ3s 8ZlQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1719520226; x=1720125026; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=TJ/Fgboai8OxwPi87QhAS1AB6bRixM+lpbCRCEM/5oQ=; b=JhGS84fF7CCeqR43eoC9Rkcmc1uLRLODogt4MOVCRrbe4DFuZMpPQ8LA17k0cwFcqE 9Ci3d8Sxr9CZw6aQbPxTw0sBQxtAdxkGkFbeDbIieYXZLUYXegaM5d+BMwhueGJcBErb NmVsymQoXa9TIoJWJwy8nTPhpRQCVMmXyrkT0GTw19MpwegBuh5me4Duwsw0gHZQQ7v4 3cU6EjrfQcz8NRRMNfcUfPdUHWuGnQGDyHxw1bDl+uYJHnIrxlQR+Rb8/DrsxpwbBfCl FOfco2BqUGDaK5UyjC/YcyIvhc0JHPeXhaCFHKynTlZ1DQv5GY3qvMA0c/x5gc9bGuki 6DjA== X-Forwarded-Encrypted: i=1; AJvYcCWwCuqzltYb7XW8Vx3okEQq2WN9rERJhcf0QVl8oE29noAgs8bgGuETbjdE2pX9P43getnJ2XaDEUFQ2VA6aADxoFe5OoM= X-Gm-Message-State: AOJu0YzMNNrp5UcmuJ4iWq+ff/7otXHZCsd1dthPzt2XmYldS5BAzMxD uMihXeezxDwJWYP5lD4uDZZBZlkBzM0IzECd7m6gxLyInY4vXwF6AjEaF0Dx X-Google-Smtp-Source: AGHT+IGxdLaMcsH4GeIkJ4FVo9Am4pMdgNitFouzc4/EXcb52PO7udk3e8J7UWXg/poTjVRaHcEqkQ== X-Received: by 2002:a17:906:598f:b0:a6f:1d4e:734f with SMTP id a640c23a62f3a-a72970016ddmr208705866b.36.1719516445753; Thu, 27 Jun 2024 12:27:25 -0700 (PDT) Received: from lumine.fritz.box (85-127-52-93.dsl.dynamic.surfer.at. [85.127.52.93]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-a72aaf18963sm4994566b.26.2024.06.27.12.27.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 27 Jun 2024 12:27:25 -0700 (PDT) Message-ID: Subject: Re: Emacs 29.4 emergency bugfix release From: Liliana Marie Prikler To: Adam Porter , 71729@debbugs.gnu.org Date: Thu, 27 Jun 2024 21:27:23 +0200 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 71729 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Adam, Am Donnerstag, dem 27.06.2024 um 08:57 -0500 schrieb Adam Porter: > Thanks. >=20 > If I may ask here, as it seems relevant and might help other users in > the future: >=20 > A few minutes ago I ran "guix pull", but after it finished, "guix > show emacs" still shows: >=20 > =C2=A0=C2=A0 name: emacs > =C2=A0=C2=A0 version: 29.3 >=20 > Am I missing something?=C2=A0 e.g. the equivalents in Debian, like "apt > show emacs" or "apt policy emacs", show both installed and available > versions. You're missing the graft, which apparently does not show up in "guix show". =20 > So as a user, how am I to know whether I'm using the latest version > of a package?=C2=A0 I also tried "guix upgrade -n" (which updates > substitute lists from the network, which can significantly delay its > finishing for a simple check like this), and it shows: >=20 > =C2=A0=C2=A0 The following packages would be upgraded: > =C2=A0=C2=A0=C2=A0 emacs=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 (dependencies or package changed) >=20 > But maybe that's affected by the workaround I'm using (see below). FWIW, with emacs you can check (emacs-version). More generally, this is a bug =E2=80=93 replacements ought to be announced somehow. > > > FWIW, I had hoped that I could install it by running: > > >=20 > > > =C2=A0=C2=A0=C2=A0 guix install --with-version=3Demacs=3D29.4 emacs > > >=20 > > > But that fails the validate-comp-integrity phase, showing that > > > all of > > > its tests fail, with every function being loaded in byte-compiled > > > form instead of native-compiled. >=20 > > Ah, yes, that is not something you can do with --with-version, as > > it > > disregards our patches and everything. >=20 > Ah, I wish I had known that.=C2=A0 FWIW, looking at=20 > < > https://guix.gnu.org/manual/en/html_node/Package-Transformation-Option > s.html>, I can't even find "--with-version" documented at all.=C2=A0 But > besides that, none of them seem to explain that such options may > discard parts of the package definition, such as patches (if any of > those other options do--is it only "--with-version" that does?).=C2=A0 > Does a documentation bug need to be filed about this? The info manual (which you can read locally) has both, as well as the warning you seek. > > As for how to work around this, you can do a more elaborate package > > definition: > >=20 > > =C2=A0=C2=A0 (package > > =C2=A0=C2=A0=C2=A0=C2=A0 (inherit emacs) > > =C2=A0=C2=A0=C2=A0=C2=A0 (version NEW_VERSION) > > =C2=A0=C2=A0=C2=A0=C2=A0 (source (origin (inherit (package-source emacs= )) > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 (uri NEW_URI)))) > >=20 > > This should automatically apply our patches.=C2=A0 Or, you can locally > > run `guix refresh -u emacs'. >=20 > Thanks for the pointer.=C2=A0 I defined a package called "emacs-jit" (and > a corresponding "emacs-minimal-jit") that comments out the > JIT-disabling patches, so that I can still JIT-compile packages > installed through Emacs, and it seems to be working fine. >=20 > Would you be willing to accept some kind of package definition like > that being added to Guix, as an alternative to the main "emacs" > package?=C2=A0(I won't quibble over the name.)=C2=A0 I think that there a= re a > significant number of users who would like to use Guix to keep Emacs > up-to-date without sacrificing the ability to native-compile packages > installed from within Emacs.=C2=A0 It would be nice to have this in Guix > so that I wouldn't have to manually update the package definition > according to upstream changes. But then you'd be shifting the maintenance burden to us Guix. We already have enough Emacs variants to keep track of as-is, and adding yet another orthogonal angle is not going to scale well. Plus, for this variant you'd lose all the benefits that Guix provides =E2=80=93 I don= 't see this as a reasonable thing to ship, to be honest. Cheers From unknown Sat Sep 20 07:49:31 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 26 Jul 2024 11:24:08 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator