GNU bug report logs - #72851
[PATCH] gnu: pidgin: Update to 2.14.13 [security fixes].

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Liliana Marie Prikler <liliana.prikler <at> gmail.com>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#72851: closed ([PATCH] gnu: pidgin: Update to 2.14.13
 [security fixes].)
Date: Sat, 31 Aug 2024 16:34:01 +0000

[Message part 1 (text/plain, inline)]

Your message dated Sat, 31 Aug 2024 18:31:08 +0200
with message-id <cf7e363c6c148a06a44e2ca766ef13ed5d43d794.camel <at> gmail.com>
and subject line Re: [PATCH v2 4/6] gnu: pidgin: Use system ssl certs.
has caused the debbugs.gnu.org bug report #72851,
regarding [PATCH] gnu: pidgin: Update to 2.14.13 [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
72851: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=72851
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Dariqq <dariqq <at> posteo.net>
To: guix-patches <at> gnu.org
Cc: Dariqq <dariqq <at> posteo.net>, me <at> tobias.gr
Subject: [PATCH] gnu: pidgin: Update to 2.14.13 [security fixes].
Date: Wed, 28 Aug 2024 07:41:43 +0000

The 2.14.9 update fixes CVE-2022-26491.

Cleanup leftovers from 89f4f0baa9ff956ba0efe9ec20e1805f01230a54.

* gnu/packages/messaging.scm (pidgin): Update to 2.14.13.
[source]: Switch to bz2 compression.
[snippet]: Remove.
[native-inputs]: Remove autoconf, automake and libtool.

Change-Id: Icde29d67b5ac09d7dc0939eb6c779d39b3470a6f
---
Change to bz2 compressed tarball as that is what guix refresh downloaded. This is the one used by other distributions (I have checked Arch, Fedora, NixOs). CCing the person who did the last update.

 gnu/packages/messaging.scm | 19 +++++--------------
 1 file changed, 5 insertions(+), 14 deletions(-)

diff --git a/gnu/packages/messaging.scm b/gnu/packages/messaging.scm
index 3f375f34c6..aaee5f7286 100644
--- a/gnu/packages/messaging.scm
+++ b/gnu/packages/messaging.scm
@@ -948,32 +948,23 @@ (define-public ngircd
 (define-public pidgin
   (package
     (name "pidgin")
-    (version "2.14.5")
+    (version "2.14.13")
     (source
      (origin
        (method url-fetch)
        (uri
         (string-append "mirror://sourceforge/pidgin/Pidgin/"
-                       version "/pidgin-" version ".tar.gz"))
+                       version "/pidgin-" version ".tar.bz2"))
        (sha256
-        (base32 "12llip3r8126gph82r638xjv2v2rg34qgggn1nbwfmc3s7halimr"))
+        (base32 "1a3by4niw5ls67mwgj20p2mr317zj4hzysi5glm9mq0pivf4j00j"))
        (patches
-        (search-patches "pidgin-add-search-path.patch"))
-       (modules '((guix build utils)))
-       (snippet
-        '(begin
-           ;; Remove stale generated file after applying patches.
-           (delete-file "configure")
-           #t))))
+        (search-patches "pidgin-add-search-path.patch"))))
     (build-system glib-or-gtk-build-system)
     (native-inputs
-     `(("autoconf" ,autoconf) ;; For bootstrap
-       ("automake" ,automake) ;; For bootstrap
-       ("check" ,check)
+     `(("check" ,check)
        ("dot" ,graphviz)
        ("gconf" ,gconf)
        ("intltool" ,intltool)
-       ("libtool" ,libtool) ;; For bootstrap
        ("pkg-config" ,pkg-config)))
     (inputs
      `(("avahi" ,avahi)

base-commit: 8b25e1c5c2e8833444e702209f11731627f85239
-- 
2.45.2

[Message part 3 (message/rfc822, inline)]

From: Liliana Marie Prikler <liliana.prikler <at> gmail.com>
To: Dariqq <dariqq <at> posteo.net>, 72851-done <at> debbugs.gnu.org
Cc: me <at> tobias.gr
Subject: Re: [PATCH v2 4/6] gnu: pidgin: Use system ssl certs.
Date: Sat, 31 Aug 2024 18:31:08 +0200

Am Samstag, dem 31.08.2024 um 09:07 +0000 schrieb Dariqq:
> 
> I am not motivated enough to try to patch pidgin to make this work,
> when all I initially wanted is a version that is not 3 years out of
> date.
Fair enough.  It's pushed now.

Cheers

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.