From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 00/24] [security fixes] for near-leaf packages Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:34:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.172998200423482 (code B ref -1); Sat, 26 Oct 2024 22:34:02 +0000 Received: (at submit) by debbugs.gnu.org; 26 Oct 2024 22:33:24 +0000 Received: from localhost ([127.0.0.1]:42846 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pLX-00066g-VZ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:33:24 -0400 Received: from lists.gnu.org ([209.51.188.17]:48912) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pLW-00066Z-IW for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:33:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pKy-0006af-2d for guix-patches@gnu.org; Sat, 26 Oct 2024 18:32:48 -0400 Received: from 11.mo584.mail-out.ovh.net ([46.105.34.195]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pKw-0005Pp-A8 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:32:47 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.2.179]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZCt4jXXz1Pl8 for ; Sat, 26 Oct 2024 22:32:42 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-7f7jj (unknown [10.110.113.115]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 488761FDDC; Sat, 26 Oct 2024 22:32:42 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-7f7jj with ESMTPSA id vDxXBwpuHWdU3QIALPKLSA (envelope-from ); Sat, 26 Oct 2024 22:32:42 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0021f91fe0c-76e0-4846-8668-17f2e16d3842, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:29:48 +0200 Message-ID: <20241026223238.26667-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 7929150095631442658 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudduucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeffgeetfffgffejgeejvdffgfdtvdeuueetgfefuedvjeegvdegjeejveeuueevnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeegpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=TR9DVQxpqO6JNm+Rxl4itS1RT8Pscd28W9kCvoLnsM0=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729981962; v=1; b=Ml22yt/NriKXGi/3AbiIxXMOF2lIMYZeLWyeiamdW7DV5dX+Su3DPzzsFSUGlcw+C2Gf5Tmm sRd1KVrwbpuLwb5DNMTxwqaP7Q5Qf2VoCdgEJ+oMvYWlxYFxilytg0XBFPLnugTn4SM0ruEu0Zd O5H1Ij2u7tpXQNddcrph3rTs4/65mWEtT8t3yMrvrBTJnDn/9UWPIF0U1gcz6hPwsrKiaoDm8PO yZUmIRhcg14TXQbrb9QVyKwJjbqZmoOO3JkjZw8CPiSUq7GdH7sMMtXB7Az+ZK6eYGKbWbMi4+d M1mvyMJoYN2GrgEiNvD9gYikwVe7omy09EfFfdtrWr64w== Received-SPF: pass client-ip=46.105.34.195; envelope-from=ngraves@ngraves.fr; helo=11.mo584.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This patch series adds updates and security fixes for packages that have less than 10 dependent packages. Nicolas Graves (24): gnu: python-django-4.2: Update to 4.2.16. [security fixes] gnu: maradns: Update to 3.5.0036. [security fixes] gnu: maradns: Improve style. gnu: libmobi: Update to 0.12. [security fixes] gnu: bart: Update to 0.9.00. [security fixes] gnu: wireshark: Update to 4.4.1. [security fixes] gnu: pam-u2f: Update to 1.3.0. [security fixes] gnu: darkhttpd: Update to 1.16. [security fixes] gnu: xlsxio: Update to 0.2.35. [security fixes] gnu: pypy: Update to 7.3.17. [security fixes] gnu: indent: Remove uneeded arguments. gnu: indent: Add patch for CVE-2024-0911. [security fixes] gnu: squashfs-tools: Update to 4.6.1. [security fixes] gnu: shapelib: Update to 1.6.1. [security fixes] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] gnu: gifsicle: Update to 1.95. [security fixes] gnu: sendmail: Update to 8.18.1. [security fixes] gnu: openvpn: Update to 2.6.12. [security fixes] gnu: youtube-dl: Deprecate package. gnu: liblouis: Update to 3.31.0. [security fixes] gnu: unicorn: Update to 2.1.1. [security fixes] gnu: Add sexpp. gnu: rnp: Update to 0.17.1. [security fixes] gnu: cjson: Update to 1.7.18. [security fixes] gnu/local.mk | 1 + gnu/packages/code.scm | 31 +------- gnu/packages/compression.scm | 52 ++++++------- gnu/packages/django.scm | 8 +- gnu/packages/dns.scm | 64 ++++++++-------- gnu/packages/ebook.scm | 4 +- gnu/packages/emulators.scm | 9 ++- gnu/packages/geo.scm | 8 +- gnu/packages/gnome.scm | 45 ++++++----- gnu/packages/image-processing.scm | 8 +- gnu/packages/image.scm | 4 +- gnu/packages/javascript.scm | 4 +- gnu/packages/language.scm | 47 ++++++------ gnu/packages/mail.scm | 5 +- gnu/packages/networking.scm | 4 +- gnu/packages/openpgp.scm | 76 +++++++++++++------ .../patches/indent-CVE-2024-0911.patch | 61 +++++++++++++++ gnu/packages/pypy.scm | 4 +- gnu/packages/security-token.scm | 9 +-- gnu/packages/video.scm | 3 +- gnu/packages/vpn.scm | 4 +- gnu/packages/web.scm | 24 +++--- gnu/packages/xml.scm | 4 +- 23 files changed, 278 insertions(+), 201 deletions(-) create mode 100644 gnu/packages/patches/indent-CVE-2024-0911.patch -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 01/24] gnu: python-django-4.2: Update to 4.2.16. [security fixes] References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998262625796 (code B ref 74035); Sat, 26 Oct 2024 22:44:02 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:46 +0000 Received: from localhost ([127.0.0.1]:42993 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVa-0006hu-AQ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:46 -0400 Received: from 20.mo581.mail-out.ovh.net ([46.105.49.208]:37013) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVX-0006hd-9V for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:44 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.148.34]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRw1LCfz1Hr9 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dk7fm (unknown [10.110.178.131]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E934D1FDD5; Sat, 26 Oct 2024 22:43:07 +0000 (UTC) Received: from ngraves.fr ([37.59.142.108]) by ghost-submission-5b5ff79f4f-dk7fm with ESMTPSA id 7KuHLntwHWehlBYAbQeWaQ (envelope-from ); Sat, 26 Oct 2024 22:43:07 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-108S002abb8b42c-e4e8-4845-b369-e527b0c97b79, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:22 +0200 Message-ID: <20241026224300.30694-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8105353433055290082 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeffgeetfffgffejgeejvdffgfdtvdeuueetgfefuedvjeegvdegjeejveeuueevnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=pxk7UZfXkYvn1LkT9YH2e2k0/sOL0hU4dQ8JC7xa7pM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982588; v=1; b=B/YqP9aalZAfS6cV0Vloa4a6h/WS5JoXp1iMUsXWSOYlQOBYUprehBtL+qRjk4JqXqj0V9qe nvWrQAZWuU1tPCKY/4gaiq5RGeXvjId/L0FDb6+3xeCzquTQna96z8DMneNDIsrMUAUZBCDDqKg vuW6XwoRehpq9r72qR2QWeYTELEWCWQk5oq+OrIXaLkmQvAFzo8Xcc840JfNu2FOqSmaZKZoxHU ArEJ2IP3cncvVeTWUzZRIwk74FQa+wZWniMaTx8BjwCXbqpIfj/g23Tx48rkgywx2wx9evvJWVr xtrEG6E9lbnPa2syLbYvAelV5r7tb9j2Kd+TQcy6PAG2A== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231, CVE-2023-43665 and CVE-2023-46695. * gnu/packages/django.scm (python-django-4.2): Update to 4.2.16. [properties]: Add lint-hidden-cve property. --- gnu/packages/django.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/django.scm b/gnu/packages/django.scm index 4404c8368d..4cf043f7c1 100644 --- a/gnu/packages/django.scm +++ b/gnu/packages/django.scm @@ -57,13 +57,13 @@ (define-module (gnu packages django) (define-public python-django-4.2 (package (name "python-django") - (version "4.2.5") + (version "4.2.16") (source (origin (method url-fetch) (uri (pypi-uri "Django" version)) (sha256 (base32 - "1ha6c5j3pizbsfzw37r52lvdz8z5lblq4iwa99mpkdzz92aiqp2y")))) + "1b8xgwg3gjr974j60x3vgcpp85cg5dwhzqdpdbl8qh3cg311c5kg")))) (build-system pyproject-build-system) (arguments '(#:test-flags @@ -140,7 +140,9 @@ (define-public python-django-4.2 any Web site. Django focuses on automating as much as possible and adhering to the @dfn{don't repeat yourself} (DRY) principle.") (license license:bsd-3) - (properties `((cpe-name . "django"))))) + (properties `((cpe-name . "django") + ;; This CVE seems fixed since 4.2.1. + (lint-hidden-cve . ("CVE-2023-31047")))))) (define-public python-django-3.2 (package -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 02/24] gnu: maradns: Update to 3.5.0036. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998262725803 (code B ref 74035); Sat, 26 Oct 2024 22:44:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:47 +0000 Received: from localhost ([127.0.0.1]:42995 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVa-0006i1-Q2 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:47 -0400 Received: from 1.mo575.mail-out.ovh.net ([46.105.41.146]:58315) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVX-0006hf-Vd for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:45 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.9.109]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRw75j0z1jMF for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-r9hh7 (unknown [10.110.96.193]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id BD1591FD91; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-r9hh7 with ESMTPSA id LmigJHxwHWelZRkANT5Cbw (envelope-from ); Sat, 26 Oct 2024 22:43:08 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004713b7531-4fe1-435f-a18c-0113b0a59ece, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:23 +0200 Message-ID: <20241026224300.30694-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8105353433609593570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=onnxrFb5nK8ls90p7kXO3kCbBG6qTED88gtXfuvLivE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982589; v=1; b=XDzk8FoGJFWUSHzkJc+BG4BC4O1gDjUplTzYoIt04+XW8mc02PRT1F1dzoBPqMZj/UeCRubN GXksPfeywUsdyE44DnYXDPHEy4KPFxmVZEx3BgmlA1kbZ8l8gQLm3v1gte6nNVe896ipWyNEzV3 SwVicp13eNnd7Qo9e46DVzqHnKALzvmStkLWqlm/kKhtaedK9pn/660EFJqrhFCZZVrVIzmZs/w 6Qduz9b09sHaoylXvmACi0I6JqOp8Mi4L7khARU5fXCqquznf0Tn+/TKlnNBNgimYE7oAyZSHUo RJVTkvtfHjuQk/jaDon3mvm+trdotu2Y9isBTmoM2EeaQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-31137. * gnu/packages/dns.scm (maradns): Update to 3.5.0036. [properties]: Add release-monitoring-url property. --- gnu/packages/dns.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index e911a142ef..bd2df30f01 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1181,7 +1181,7 @@ (define-public public-suffix-list (define-public maradns (package (name "maradns") - (version "3.5.0022") + (version "3.5.0036") (source (origin (method url-fetch) @@ -1189,7 +1189,7 @@ (define-public maradns (version-major+minor version) "/" version "/maradns-" version ".tar.xz")) (sha256 - (base32 "1sw267jxxxngjcar8cj3jpxnpiz0szgkhlz5l46c67qs690w9kdi")))) + (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments `(#:tests? #f ; need to be root to run tests @@ -1226,6 +1226,8 @@ (define-public maradns (description "MaraDNS is a small and lightweight DNS server. MaraDNS consists of a UDP-only authoritative DNS server for hosting domains, and a UDP and TCP-capable recursive DNS server for finding domains on the internet.") + (properties '((release-monitoring-url + . "https://maradns.samiam.org/download.html"))) (license license:bsd-2))) (define-public openresolv -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 03/24] gnu: maradns: Improve style. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263325825 (code B ref 74035); Sat, 26 Oct 2024 22:44:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:53 +0000 Received: from localhost ([127.0.0.1]:42999 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVh-0006iS-7u for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:53 -0400 Received: from 17.mo550.mail-out.ovh.net ([87.98.179.142]:50475) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVZ-0006hm-BC for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:46 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.59]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRy0Nw6z1SwB for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:10 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j9l5v (unknown [10.111.182.47]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id BAECA1FD6B; Sat, 26 Oct 2024 22:43:09 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-j9l5v with ESMTPSA id 9hvbHX1wHWebUAAAgDeOYQ (envelope-from ); Sat, 26 Oct 2024 22:43:09 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R0039176b495-c296-493a-8c40-8c18fe095fa4, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:24 +0200 Message-ID: <20241026224300.30694-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8105916380142625506 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddttdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheehtddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=amrZS3GarlmkVIj6HiT3MN4ghng6ibDQEQGAPgPZ/3A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982590; v=1; b=38KULZTH+OWeFI0HOkeBo+CjcH0oGGXI22waMJnTVxt2YU5a0XPqBUUb+xa7txJtr5sPQrlM 3STTDd0b1rgrqp6/ZODoXqfcARJAU5o6Gcr1AOo8rNT7U9BrAh+rCa0/1q/oerynf8ThtoQBM+O gSiAorGAMeQELkX6u8GOQE3V0U+/ts1xrhGvPtKMkurpzMJaHI1f3IXYBhF5Fj8pL0swVmExw8N rDjDh537e/hjpTCiUA9EF0Ub5i6OTKGR/pODOM4qCDTZVsheu1i3D2nIHQKTSX+v/trjNZ9exs+ E5FyUfz6y+Ekx5qDD/ERZ/RhYxPBMBYgjUvKZtxPJ6McQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/dns.scm (maradns)[arguments]: Use gexps. --- gnu/packages/dns.scm | 58 ++++++++++++++++++++++---------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bd2df30f01..7a78fb0308 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1192,35 +1192,35 @@ (define-public maradns (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; need to be root to run tests - #:make-flags - (list - ,(string-append "CC=" (cc-for-target)) - (string-append "PREFIX=" %output) - (string-append "RPM_BUILD_ROOT=" %output)) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda* (#:key native-inputs target #:allow-other-keys) - ;; make_32bit_tables generates a header file that is used during - ;; compilation. Hence, during cross compilation, it should be - ;; built for the host system. - (when target - (substitute* "rng/Makefile" - (("\\$\\(CC\\) -o make_32bit_tables") - (string-append (assoc-ref native-inputs "gcc") - "/bin/gcc -o make_32bit_tables")))) - (invoke "./configure"))) - (add-before 'install 'create-install-directories - (lambda* (#:key outputs #:allow-other-keys) - (let ((out (assoc-ref outputs "out"))) - (for-each (lambda (dir) - (mkdir-p (string-append out dir))) - (list "/bin" "/sbin" "/etc" - "/share/man/man1" - "/share/man/man5" - "/share/man/man8")) - #t)))))) + (list + #:tests? #f ; need to be root to run tests + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + (string-append "PREFIX=" #$output) + (string-append "RPM_BUILD_ROOT=" #$output)) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda* (#:key native-inputs target #:allow-other-keys) + ;; make_32bit_tables generates a header file that is used during + ;; compilation. Hence, during cross compilation, it should be + ;; built for the host system. + (when target + (substitute* "rng/Makefile" + (("\\$\\(CC\\) -o make_32bit_tables") + (string-append (search-input-file native-inputs "/bin/gcc") + " -o make_32bit_tables")))) + ;; ./configure doesn't support default flags + (invoke "./configure"))) + (add-before 'install 'create-install-directories + (lambda _ + (for-each (lambda (dir) + (mkdir-p (string-append #$output dir))) + (list "/bin" "/sbin" "/etc" + "/share/man/man1" + "/share/man/man5" + "/share/man/man8"))))))) (home-page "https://maradns.samiam.org") (synopsis "Small lightweight DNS server") (description "MaraDNS is a small and lightweight DNS server. MaraDNS -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 04/24] gnu: libmobi: Update to 0.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263825854 (code B ref 74035); Sat, 26 Oct 2024 22:44:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:58 +0000 Received: from localhost ([127.0.0.1]:43007 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVl-0006iv-No for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:57 -0400 Received: from 14.mo582.mail-out.ovh.net ([46.105.56.113]:52755) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVf-0006iI-9Y for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:52 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.25.156]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS41WkYz1JmL for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:16 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dk7fm (unknown [10.110.178.131]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id ADA751FE51; Sat, 26 Oct 2024 22:43:12 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-dk7fm with ESMTPSA id d046GH5wHWeslBYAbQeWaQ (envelope-from ); Sat, 26 Oct 2024 22:43:12 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R0054024607a-4553-4f49-af22-b1d82a8dac90, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:25 +0200 Message-ID: <20241026224300.30694-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8107605230612374242 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdegnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=wseqx7spf4lhsH68MqgOQ/QcG6moMZQns/hENydGodU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982596; v=1; b=bJjcp9HBLglnP7dXDCWmEiI3SEiM+herMHSmcJSZbhc9ZyNupCtfLnTAupBzvvNzjRlnDHqR nGyZq8nPAg46oLEldTprmvWnFPxBXvzP5QDN4JhIYPfTkfwkouYIRVf4o896wq7i68y8qTGPOR9 bJ/Qogy7b52JbvQdBTXai1TNXuoZtxeBk3K1FJsqwMxWGfC/Z4l1ZfFmUc1wmPrDhEsZLPIM25p F7+00ndggyJqDJvIilTi2b58Q+2NYShWoXlGCwOShgiIs6zK+U9S8MmnlEt5dpm4cvRwSnaIb3R ne/rqYLAIUlRdOcqA9h2oKGB4xiYqxfjUOvcOKBbOtKDw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908, CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751, CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889. * gnu/packages/ebook.scm (libmobi): Update to 0.12. --- gnu/packages/ebook.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ebook.scm b/gnu/packages/ebook.scm index dc30c98fdf..bf8dcfad09 100644 --- a/gnu/packages/ebook.scm +++ b/gnu/packages/ebook.scm @@ -648,7 +648,7 @@ (define-public xchm (define-public libmobi (package (name "libmobi") - (version "0.6") + (version "0.12") (source (origin (method git-fetch) (uri (git-reference @@ -657,7 +657,7 @@ (define-public libmobi (file-name (git-file-name name version)) (sha256 (base32 - "0yps72cm609xn2k7alflkdhp9kgr1w7zzyxjygz0n1kqrdcplihh")))) + "0cwya9n0rd97ai0fcqjwq7b3sjzigf3ywp7bnkbbw541f3knpds9")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 05/24] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263825861 (code B ref 74035); Sat, 26 Oct 2024 22:44:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:58 +0000 Received: from localhost ([127.0.0.1]:43009 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVm-0006ix-1c for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:58 -0400 Received: from 9.mo575.mail-out.ovh.net ([46.105.78.111]:56113) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVi-0006iT-E8 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:55 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.139.43]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS71Gw6z1jNQ for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.178.240]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E20141FE4C; Sat, 26 Oct 2024 22:43:18 +0000 (UTC) Received: from ngraves.fr ([37.59.142.109]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id TNlPL4ZwHWfnnBYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:18 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-109S0035e698893-f7b6-4e4a-a9e9-1c53eddee0aa, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:26 +0200 Message-ID: <20241026224300.30694-5-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8108449658031235810 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982599; v=1; b=AIhrEuy3scxC9C0kIsk3XJfRoYcUUaSfbD86CdFo5wG8rvrc6MBFdbA2EmWgzdQ0716mRI+i RyCrf+Zodw4DgV8+xYl6QwAqpVXX5rBZ66Zvkn3MMfn6gJhs9MEIzlg+UF7bDl0CtTjj4PlLZbB ECA9X1bm92nk8xMdR3IuUVIiZTk7AIkfD6UXjq72s2MVGSYeZnfGUFWVd/jIlVccO5Y36Hie5l5 RBkZBtCzld/9yYnD56lT9vJrEPpNtOb5ZneeoTJBH4fE9pUJjdSB3vYi+OYkenxZill2lTC3X6O PQJHscHjkIQCXSpV+DV3JYfwvx2IAlU2mbUhkXzZ4qCEg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 06/24] gnu: wireshark: Update to 4.4.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264525935 (code B ref 74035); Sat, 26 Oct 2024 22:44:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:05 +0000 Received: from localhost ([127.0.0.1]:43018 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006kB-Gk for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:04 -0400 Received: from 10.mo575.mail-out.ovh.net ([46.105.79.203]:32903) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVk-0006id-2K for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:56 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.25.156]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS75R60z1jPr for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-gfxm6 (unknown [10.110.168.37]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 861F71FD5F; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-gfxm6 with ESMTPSA id 7pNSGodwHWeMYhoAozXF8w (envelope-from ); Sat, 26 Oct 2024 22:43:19 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R0014250adef-2b77-4aad-93e2-8dc69c7752cb, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:27 +0200 Message-ID: <20241026224300.30694-6-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8108449656175583970 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfegvdefjeegteegteduueeigeevleetgeevteeffedttdffjefgleevgeekvefhnecuffhomhgrihhnpeifihhrvghshhgrrhhkrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=L4Z/IERDX6ZhZ5O479nkCkfR6S4gTAkH7BDsC4Yz9u0=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982599; v=1; b=kYtNNA0SwT65ATppNhLzTz7YxmoVq3NTujZEJfVdd+sXZpPakTbhzMmXWUHmIvXQEqxou3tH 0Bl4E82fqbIDP5HFYA4ti8K5D2R3vP5rFX7GM24lNpFsHvku2iBd7aqvHqoTJ062/ER60Be4/R0 769sYR8gS7aHIOSou4tcL0BGB8d0gXj3C+Tsz+Vk/p9xBtVnNbBn1oncQavpsIfpuCX7dq68Xuz OBpWuvChkn6as+YJVvcZya5SZPLY4ReikEfZsLNs9uG3nZX/4e2nNaMNaJgbFmFoE5lP1mrEJPm tKKipZNsr6N3U6WdhhzFQJJwOUbXk7Htagaqmq2GvfnQQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-9780. * gnu/packages/networking.scm (wireshark): Update to 4.4.1. --- gnu/packages/networking.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 7ed011a7f4..31b72f1104 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -1805,14 +1805,14 @@ (define-public whois (define-public wireshark (package (name "wireshark") - (version "4.4.0") + (version "4.4.1") (source (origin (method url-fetch) (uri (string-append "https://www.wireshark.org/download/src/wireshark-" version ".tar.xz")) (sha256 - (base32 "0s8jqxcvq7ibfsq8v4scl8dq7y5hqgpivq4iw9y2x6jj136cvmga")))) + (base32 "1v2nflm8rdifc6pwlzn1ciz22wl15zwkqs3r7gjw60kh59brd7ib")))) (build-system qt-build-system) (arguments (list -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 07/24] gnu: pam-u2f: Update to 1.3.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264525953 (code B ref 74035); Sat, 26 Oct 2024 22:44:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:05 +0000 Received: from localhost ([127.0.0.1]:43020 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006kN-Vj for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:05 -0400 Received: from 7.mo560.mail-out.ovh.net ([188.165.48.182]:32993) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVk-0006ic-1t for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:57 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.2.78]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS90CQYz1Zn3 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:21 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-wprtk (unknown [10.111.174.124]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id B2B861FD0F; Sat, 26 Oct 2024 22:43:20 +0000 (UTC) Received: from ngraves.fr ([37.59.142.108]) by ghost-submission-5b5ff79f4f-wprtk with ESMTPSA id X0LnF4hwHWc1hQYA0aRQUA (envelope-from ); Sat, 26 Oct 2024 22:43:20 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-108S002d157e7ee-1468-4f22-82f1-ee3b50bea7f3, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:28 +0200 Message-ID: <20241026224300.30694-7-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8109012604121637602 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepjefffeehjeekgfejledvkeehgfeufeevleevffetvdeftddvtddvjeejhfduffdunecuffhomhgrihhnpeihuhgsihgtohdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982601; v=1; b=u2dNhkajxIicJ8IxAj9dt6vZP7fNy+ef/SI10UayP9qfapAPqeDXL53DLtSi+XYeRK4T5Zyb mgmLSH87pynpPgoNQRfPaHfI/HcgAwW0p21lv7w416cKufYeSq8LK4C4/qdTYPcX216QBMaQUCs XBYeBaU8nQ+KbDJouMOyblC1WpzWzRbQOEaVoSUx+NEug1/5UA2ZUjx81KBAYhKY4l+F3DyXjpy H7MYmw42+L7BVsbOexGfzy549rmYhZA/ohd2ZAJJD2ZQkhT7aswchDGtGM7jf/xts2UcX3fAVJo bpbbpnVbIRkFNJlbKNC4rryQBpoB6V5qBnk9tAQRH2s8g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. --- gnu/packages/security-token.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/security-token.scm b/gnu/packages/security-token.scm index 5abb461c0c..156a7d5e28 100644 --- a/gnu/packages/security-token.scm +++ b/gnu/packages/security-token.scm @@ -682,7 +682,7 @@ (define-public libu2f-server (define-public pam-u2f (package (name "pam-u2f") - (version "1.0.8") + (version "1.3.0") (source (origin (method git-fetch) (uri @@ -691,17 +691,16 @@ (define-public pam-u2f (commit (string-append "pam_u2f-" version)))) (file-name (git-file-name name version)) (sha256 - (base32 - "04d9davyi33gqbvga1rvh9fijp6f16mx2xmnn4n61rnhcn2jac98")))) + (base32 "1swvys98mw7ailllgqicvhj315qajhvqrmm314cp3bj0l76s9qpv")))) (build-system gnu-build-system) (arguments `(#:configure-flags (list (string-append "--with-pam-dir=" (assoc-ref %outputs "out") "/lib/security")))) (inputs - (list libu2f-host libu2f-server linux-pam)) + (list libfido2 linux-pam openssl)) (native-inputs - (list autoconf automake libtool asciidoc pkg-config)) + (list asciidoc autoconf automake libtool pkg-config)) (home-page "https://developers.yubico.com/pam-u2f/") (synopsis "PAM module for U2F authentication") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 08/24] gnu: darkhttpd: Update to 1.16. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264625969 (code B ref 74035); Sat, 26 Oct 2024 22:44:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:06 +0000 Received: from localhost ([127.0.0.1]:43025 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVt-0006kX-J6 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:06 -0400 Received: from 4.mo581.mail-out.ovh.net ([178.32.122.254]:44391) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVn-0006j9-EY for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:00 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.140.177]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSD24RNz1JdP for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:24 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-hchs2 (unknown [10.110.113.47]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 0AAD81FE0C; Sat, 26 Oct 2024 22:43:23 +0000 (UTC) Received: from ngraves.fr ([37.59.142.107]) by ghost-submission-5b5ff79f4f-hchs2 with ESMTPSA id tGYqM4twHWe9Fx4AcuuB1Q (envelope-from ); Sat, 26 Oct 2024 22:43:23 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-107S001ad668c6a-3ad2-4c4e-94e5-f985d2145895, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:29 +0200 Message-ID: <20241026224300.30694-8-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8109857032520393442 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdejnecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=FZc4XoXdaV0IOVWK0MPsb5lA160fqgjySzYqk4ztRY8=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982604; v=1; b=iVPCC2rkihrx1pXhp4cclCrxIvhqepNCaXke6OG7uzvmAM9eOcSKhGRsH2M/yT8DGIvbPSWI adnb55Yu4PMNjKop9FG+dyu5gwXvcTQtRPvpWXmY5dmgVxQk273LmRmeYaHOeETLETR4I+JKKXA VmBbAeE/XajN4NmEv84fJm6aZ163k36LsnHkFY/ZtIuMxCIaC/OfkazbmjripKxV9ZUn0/8hkvl lvpymSXksRtBV8uOnsapkb5EXbn510zgwj9z9d1T2gEFG3PH4HIaMQm5YuW6t3l5BWI/6zW3A8M /QfpYqfab8SAEe7EP+0uW+rjd9xfvxwVoWgvgd3fdcbwQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-23770 and CVE-2024-23771. * gnu/packages/web.scm (darkhttpd): Update to 1.16. [arguments]: Improve style. --- gnu/packages/web.scm | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 34739bf088..eb27d3448c 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -6417,7 +6417,7 @@ (define-public surfraw (define-public darkhttpd (package (name "darkhttpd") - (version "1.13") + (version "1.16") (source (origin (method git-fetch) @@ -6426,20 +6426,18 @@ (define-public darkhttpd (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "0w11xq160q9yyffv4mw9ncp1n0dl50d9plmwxb0yijaaxls9i4sk")))) + (base32 "15mmq1v8p50mm9wx5w6g4rlr40b7d044lw7rs1wyzdiw9lcnihvm")))) (build-system gnu-build-system) (arguments - `(#:make-flags - (list (string-append "CC=" ,(cc-for-target))) - #:tests? #f ; No test suite - #:phases - (modify-phases %standard-phases - (delete 'configure) ; no configure script - (replace 'install - (lambda* (#:key outputs #:allow-other-keys) - (install-file "darkhttpd" - (string-append (assoc-ref outputs "out") - "/bin"))))))) + (list + #:make-flags #~(list (string-append "CC=" #$(cc-for-target))) + #:tests? #f ; No test suite + #:phases + #~(modify-phases %standard-phases + (delete 'configure) ; no configure script + (replace 'install + (lambda _ + (install-file "darkhttpd" (string-append #$output "/bin"))))))) (synopsis "Simple static web server") (description "darkhttpd is a simple static web server. It is standalone and does not need inetd or ucspi-tcp. It does not need any -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 09/24] gnu: xlsxio: Update to 0.2.35. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265526047 (code B ref 74035); Sat, 26 Oct 2024 22:45:01 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:15 +0000 Received: from localhost ([127.0.0.1]:43041 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW3-0006m3-Ef for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:15 -0400 Received: from 19.mo582.mail-out.ovh.net ([188.165.56.177]:46075) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVt-0006kA-Ce for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:06 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.140.177]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSL1DDyz1JT0 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:30 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-r9hh7 (unknown [10.110.113.27]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id EE3481FD6B; Sat, 26 Oct 2024 22:43:29 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-r9hh7 with ESMTPSA id h1h5NJFwHWfaZRkANT5Cbw (envelope-from ); Sat, 26 Oct 2024 22:43:29 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G0036b9118b7-6706-48ac-a646-adb5831d8077, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:30 +0200 Message-ID: <20241026224300.30694-9-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8111545880832303842 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedvnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ltmM+klftrK1fgckbwRS7sp//sQEYmMV1fiUR0M1yf4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982610; v=1; b=xdbzFkf+snUYtJNejqpIGQKA/U7lA8dLUf0/5FyhmFywSyoJmgbxFlzyRtAhXszcDlkIWW/4 mO+7iv1PNww0SYhESDto10lxrHXOURNydB0ADhcChrwrk19oUXc+i/BHBvsl79fUJdk+Uzmk+fn MU1JWknKQvg8Do5FkOFTPJuGVUlMo1PFObDZP0VraOMI8jcMRlSkaAkIxIJdvEen2MO48GrJqPX c+KImNJOzLPrEmi/hf2Kn0HWScRCkD92CPkUbFe3theyIEoAdWXaYDuTGAOQ140HoruTMI9RrEV GFGs6XloWO4ffIgIgXOzTNfwSldB01Twf2vHrkMDm762A== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-34795. * gnu/packages/xml.scm (xlsxio): Update to 0.2.35. --- gnu/packages/xml.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm index cfd53a291a..4a3936b66d 100644 --- a/gnu/packages/xml.scm +++ b/gnu/packages/xml.scm @@ -1545,7 +1545,7 @@ (define-public xerces-c (define-public xlsxio (package (name "xlsxio") - (version "0.2.33") + (version "0.2.35") (source (origin (method git-fetch) @@ -1554,7 +1554,7 @@ (define-public xlsxio (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "16i3yd168kb63za7jpycpb2by4831gz7wi90vzifdf85csc8c70s")))) + (base32 "140ap2l3qy27z1fhqpkq3a44aikhr3v5zlnm9m8vag42qiagiznx")))) (native-inputs (list expat gnu-make minizip which)) (build-system gnu-build-system) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 10/24] gnu: pypy: Update to 7.3.17. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265626056 (code B ref 74035); Sat, 26 Oct 2024 22:45:02 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:16 +0000 Received: from localhost ([127.0.0.1]:43043 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW3-0006m9-Rt for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:16 -0400 Received: from 3.mo575.mail-out.ovh.net ([46.105.58.60]:49731) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVu-0006kS-7o for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.2.210]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSM0TJNz1jLx for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.113.27]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C75CE1FD0F; Sat, 26 Oct 2024 22:43:30 +0000 (UTC) Received: from ngraves.fr ([37.59.142.110]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id o15OKZJwHWdxAxIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:43:30 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-110S004d31a8926-97dc-44fe-a7ca-2db013a45d54, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:31 +0200 Message-ID: <20241026224300.30694-10-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8111827354678452962 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgeefvdeutdevhffffeetieefveekfefhleeuueelvddvteduueelveegueejtdeknecuffhomhgrihhnpehphihthhhonhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddutdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=QrA3HvGHnmMBY6EU55/q7kI1otKY9AgoX6arHGD93a4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982611; v=1; b=fJDt6YTlltUyO7AnSskTbt4FC+5aIohVe7TedFMXMWKqOmHhhgpgzL+rElHeiQwhTPk8466X sPVJBlcXMC2sDa8ofuSHZslRHpdcp1EP6N/CQ9kOA0PN7InxYiv7n65EmSCv29TjeIEhW/4QYL4 fWKiFNX/sK35xq93GKwQ1AWmNjJpEqEGLVpBvrippiLuVQBBM9oc5xzL9f69DA1B6wbOnO+3Fdf DcC/+WslC6kw//BBc76wq+hubKCykEHW4NmZ+QpaGxi2QEJ3EAlEDpdgODJWZeDb50jzQL92to3 tYLEBACpFzs0fXjCVg/Vr9NtSl+gfipIDiB/tA/CD7i5w== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-37454. * gnu/packages/pypy.scm (pypy): Update to 7.3.17. --- gnu/packages/pypy.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/pypy.scm b/gnu/packages/pypy.scm index a39621b5ad..90986ac096 100644 --- a/gnu/packages/pypy.scm +++ b/gnu/packages/pypy.scm @@ -42,14 +42,14 @@ (define-module (gnu packages pypy) (define-public pypy (package (name "pypy") - (version "7.3.13") + (version "7.3.17") (source (origin (method url-fetch) (uri (string-append "https://downloads.python.org/pypy/" "pypy3.10-v" version "-src.tar.bz2")) (sha256 (base32 - "0v9s6pwrnaxqi5h1pvmaphj6kgyczx07ykl07hcx656h34y77haa")))) + "1xsbn9mbxi2kai4gg1nz6n6cbqsq60qh65f5l6ld7ip9g32lpmva")))) (build-system gnu-build-system) (arguments (list -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 11/24] gnu: indent: Remove uneeded arguments. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265626064 (code B ref 74035); Sat, 26 Oct 2024 22:45:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:16 +0000 Received: from localhost ([127.0.0.1]:43045 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mD-7w for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:16 -0400 Received: from 2.mo581.mail-out.ovh.net ([87.98.143.68]:45689) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVu-0006ki-RF for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.139.212]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSM5L8Tz1JXh for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nrxk9 (unknown [10.110.113.27]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8A9671FD47; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-nrxk9 with ESMTPSA id zL/dFZNwHWfXVAIAGvTZWQ (envelope-from ); Sat, 26 Oct 2024 22:43:31 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G00551e757c0-abce-4457-8129-f0b7142d425a, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:32 +0200 Message-ID: <20241026224300.30694-11-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8111827354303062754 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdefnecuvehluhhsthgvrhfuihiivgepgeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=TGpMs2wlefHrHMs3Hdg+cT5DWp6IGui5Uy69oiqsxuw=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982611; v=1; b=XFVaBhjcGJlBN1cxtRNn6A7EJKnFlZPyfUJ+gEsViQh11jjd6h+b/rmSWRb/TqR2lj3+aHAZ xjTQPZuICZ7l0k4rsLO7apUxjFwAkW7s5Lnaa1gfCcvin2zpXN3RXqinz1YZZby4aZ5FVxFILBI gUxvrhJid3U+I2l//Bz9+eqQdZkyQQsyh+5ist9kbPonqR68uWBM9VBWYa+DfRuDZmT7A+rhgvq 1pmGJctDGERX58ZE+tYR6HH1Ex3L1i+swHesgBli0yyOWgQimxMu7TWERqzit4sCVHYvGGBcsrC 1unEvuyH/V0h5csilbnYcq3aTSmGru/TjJLmd7YPSnkvQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/code.scm (indent) [arguments]: Remove field. [native-inputs]: Remove automake. --- gnu/packages/code.scm | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index bbf10be987..094dd32982 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -881,33 +881,8 @@ (define-public indent (sha256 (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) (build-system gnu-build-system) - (arguments - `(#:phases - (modify-phases %standard-phases - (add-after 'unpack 'fix-docdir - (lambda _ - ;; Although indent uses a modern autoconf in which docdir - ;; defaults to PREFIX/share/doc, the doc/Makefile.am - ;; overrides this to be in PREFIX/doc. Fix this. - (substitute* "doc/Makefile.in" - (("^docdir = .*$") "docdir = @docdir@\n")) - #t)) - (add-after 'unpack 'fix-configure - (lambda* (#:key inputs native-inputs #:allow-other-keys) - ;; Replace outdated config.sub and config.guess: - (with-directory-excursion "config" - (for-each (lambda (file) - (install-file - (string-append (assoc-ref - (or native-inputs inputs) "automake") - "/share/automake-" - ,(version-major+minor - (package-version automake)) - "/" file) ".")) - '("config.sub" "config.guess"))) - #t))))) (native-inputs - (list texinfo automake)) ; For up to date 'config.guess' and 'config.sub'. + (list texinfo)) (synopsis "Code reformatter") (description "Indent is a program that makes source code easier to read by -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 12/24] gnu: indent: Add patch for CVE-2024-0911. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265726073 (code B ref 74035); Sat, 26 Oct 2024 22:45:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:17 +0000 Received: from localhost ([127.0.0.1]:43047 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mL-M2 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from 2.mo576.mail-out.ovh.net ([178.33.251.80]:54765) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVw-0006l6-0j for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:09 -0400 Received: from director9.ghost.mail-out.ovh.net (unknown [10.108.25.2]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSN6qyHz1spm for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:32 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j8lkq (unknown [10.111.182.110]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8B54D1FD1C; Sat, 26 Oct 2024 22:43:32 +0000 (UTC) Received: from ngraves.fr ([37.59.142.110]) by ghost-submission-5b5ff79f4f-j8lkq with ESMTPSA id HXycDJRwHWe/GR4ABgfSDw (envelope-from ); Sat, 26 Oct 2024 22:43:32 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-110S004dc3aa72b-f40b-4b68-858c-3b48e568f878, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:33 +0200 Message-ID: <20241026224300.30694-12-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8112108830875443938 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedugeelfeekhedugedvieffleekgeffiefhkeejudelveeuuefhheevtefghedtheenucffohhmrghinhepghhnuhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddutdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=4F7VKYOXo9/NfQLJ39ger4rUzPryYgXbRA9pHDF0I7A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982613; v=1; b=Da0j9oYzNPzgGJL7/4GMcq5bdOo2H9AZowTwzyfzpWxEOSIMeDDaw8dGu8UPllrymqmOAQ2J KlC25xzttnoAEBIErFtOZcMEG1vtcYSJgOaQG/dtHlbelIZt6JeuQpCpy/NoM2pekNKAbWBeL6O 4EQAHjhkalOSTbrTk/hAm70xb/mZ9PqTlfCgv7QE80ms8j+Dw5o70ajGOGLQUaems+kUfJ1QDbn TqOHj5nUw8SBXj0sOvFj5KoT1lybqLbBotY/OEf8oeiWANYdMKcVoBnJ2rfVHvRMYZ8GDm2+/f/ TTUbCWOMoatTVyaON9e0Wl+a3cm8Q/kiUsPkZicNgWBVg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/patches/indent-CVE-2024-0911.patch: Add patch here... * gnu/local.mk: ...here... * gnu/packages/code.scm (indent)[source]: ...and here. --- gnu/local.mk | 1 + gnu/packages/code.scm | 4 +- .../patches/indent-CVE-2024-0911.patch | 61 +++++++++++++++++++ 3 files changed, 65 insertions(+), 1 deletion(-) create mode 100644 gnu/packages/patches/indent-CVE-2024-0911.patch diff --git a/gnu/local.mk b/gnu/local.mk index d253b424bb..1a69a22aba 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1559,6 +1559,7 @@ dist_patch_DATA = \ %D%/packages/patches/idris-test-ffi008.patch \ %D%/packages/patches/igraph-fix-varargs-integer-size.patch \ %D%/packages/patches/ilmbase-fix-tests.patch \ + %D%/packages/patches/indent-CVE-2024-0911.patch \ %D%/packages/patches/instead-use-games-path.patch \ %D%/packages/patches/intltool-perl-compatibility.patch \ %D%/packages/patches/irrlicht-use-system-libs.patch \ diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index 094dd32982..dda37528b8 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -879,7 +879,9 @@ (define-public indent (uri (string-append "mirror://gnu/indent/indent-" version ".tar.gz")) (sha256 - (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) + (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")) + ;; Remove patch when updating. + (patches (search-patches "indent-CVE-2024-0911.patch")))) (build-system gnu-build-system) (native-inputs (list texinfo)) diff --git a/gnu/packages/patches/indent-CVE-2024-0911.patch b/gnu/packages/patches/indent-CVE-2024-0911.patch new file mode 100644 index 0000000000..4687d3f59a --- /dev/null +++ b/gnu/packages/patches/indent-CVE-2024-0911.patch @@ -0,0 +1,61 @@ +Upstream issue: https://lists.gnu.org/archive/html/bug-indent/2024-01/msg00001.html +Signed-off-by: Petr Písař +--- + regression/TEST | 2 +- + regression/input/comment-parent-heap-underread.c | 3 +++ + regression/standard/comment-parent-heap-underread.c | 5 +++++ + src/output.c | 2 +- + 4 files changed, 10 insertions(+), 2 deletions(-) + create mode 100644 regression/input/comment-parent-heap-underread.c + create mode 100644 regression/standard/comment-parent-heap-underread.c + +diff --git a/regression/TEST b/regression/TEST +index 7c07c2e..951b1a2 100755 +--- a/regression/TEST ++++ b/regression/TEST +@@ -40,6 +40,7 @@ BUGS="case-label.c one-line-1.c one-line-2.c one-line-3.c \ + macro.c enum.c elif.c nested.c wrapped-string.c minus_predecrement.c \ + bug-gnu-33364.c float-constant-suffix.c block-comments.c \ +- no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c" ++ no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c \ ++ comment-parent-heap-underread.c" + + INDENTSRC="args.c backup.h backup.c dirent_def.h globs.c indent.h \ + indent.c indent_globs.h io.c lexi.c memcpy.c parse.c pr_comment.c \ +diff --git a/regression/input/comment-parent-heap-underread.c +b/regression/input/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..68e13cf +--- /dev/null ++++ b/regression/input/comment-parent-heap-underread.c +@@ -0,0 +1,3 @@ ++void foo(void) { ++/*a*/(1); ++} +diff --git a/regression/standard/comment-parent-heap-underread.c +b/regression/standard/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..9a1c6e3 +--- /dev/null ++++ b/regression/standard/comment-parent-heap-underread.c +@@ -0,0 +1,5 @@ ++void ++foo (void) ++{ ++/*a*/ (1); ++} +diff --git a/src/output.c b/src/output.c +index ee01bcc..17eee6e 100644 +--- a/src/output.c ++++ b/src/output.c +@@ -290,7 +290,7 @@ void set_buf_break ( + /* Did we just parse a bracket that will be put on the next line + * by this line break? */ + +- if ((*token == '(') || (*token == '[')) ++ if (level > 0 && ((*token == '(') || (*token == '['))) + { + --level; /* then don't take it into account */ + } +-- +2.43.0 -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 13/24] gnu: squashfs-tools: Update to 4.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265826081 (code B ref 74035); Sat, 26 Oct 2024 22:45:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:18 +0000 Received: from localhost ([127.0.0.1]:43051 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW5-0006mT-Cu for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from 2.mo583.mail-out.ovh.net ([178.33.109.111]:52027) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVw-0006lR-Qn for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:09 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.108.17.89]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSP5CtFz1RtQ for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:33 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z9lq8 (unknown [10.110.96.108]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 81BC71FD27; Sat, 26 Oct 2024 22:43:33 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-z9lq8 with ESMTPSA id 5eHJGJVwHWff9gMAuZL+2g (envelope-from ); Sat, 26 Oct 2024 22:43:33 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001fd130c7d-49a6-4861-92ac-37967ebfe8d8, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:34 +0200 Message-ID: <20241026224300.30694-13-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8112390304805675746 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeinecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=cWQFYZlJPPhQJcOG4kfLM00gy8K7sOEexw7/v7P3OrA=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982613; v=1; b=Sv7sjirNfpquNGRM2cdErPaz2LOu1gliyk46msVigdY1RjkxW9ou5aHgYLsFPdP9f3YGM+2o QuoWT33OcSpgU1gcKiWtss4z0z3YX36mg0fpeNdtjOZPv57Uf0SQesTWNX9WOAu8I25E2gYb/0+ 86FWIP+PsNHdTao74i3J5GQrKyXAgKcbAEVnPiQLkMY663KDrXj0iWCwdHgmKWnQ81mMq64Aw13 CNZ/WLOTioLXvXyRNLaVzEU6ux7UEzvfonsHPfU74VgxX0yF8lpNfA6+Ye7nb1dXQXCyqanzYuT rp53ykGoAcLzIkO/ROcMMPUPepvlAc6ITRY8VVRvfvYdQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-40153 and CVE-2021-41072. * gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1. [arguments]: Improve style. <#:make-flags>: Add INSTALL_MANPAGES_DIR value. <#:phases>: Remove phase 'install-documentation. Add phase 'patch-generated-source-shebangs. [native-inputs]: Add coreutils-minimal, help2man, which. [inputs]: Rewrite. --- gnu/packages/compression.scm | 52 ++++++++++++++++++------------------ 1 file changed, 26 insertions(+), 26 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index a32b15a64a..b3eca16191 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -1023,7 +1023,7 @@ (define-public lz4 (define-public squashfs-tools (package (name "squashfs-tools") - (version "4.5") + (version "4.6.1") (source (origin (method git-fetch) @@ -1032,34 +1032,34 @@ (define-public squashfs-tools (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "18d4nwa22vgb8j2badngjngw63f0lj501cvlh3920wqy2mqxwav6")))) + (base32 "14nisidxx2d2qivyv7xfcg59qkj4fjiniir7nvymazdsng63gcr1")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; no check target - #:make-flags - (list (string-append "CC=" ,(cc-for-target)) - "XZ_SUPPORT=1" - "LZO_SUPPORT=1" - "LZ4_SUPPORT=1" - "ZSTD_SUPPORT=1" - (string-append "INSTALL_DIR=" (assoc-ref %outputs "out") "/bin")) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda _ - (chdir "squashfs-tools"))) - (add-after 'install 'install-documentation - ;; Install what very little usage documentation is provided. - (lambda* (#:key outputs #:allow-other-keys) - (let* ((out (assoc-ref outputs "out")) - (doc (string-append out "/share/doc/" ,name))) - (install-file "../USAGE" doc))))))) + (list + #:tests? #f ; no check target + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + "XZ_SUPPORT=1" + "LZO_SUPPORT=1" + "LZ4_SUPPORT=1" + "ZSTD_SUPPORT=1" + (string-append "INSTALL_DIR=" #$output "/bin") + (string-append "INSTALL_MANPAGES_DIR=" #$output "/share/man/man1")) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda _ + (chdir "squashfs-tools"))) + (add-after 'patch-source-shebangs 'patch-generated-source-shebangs + (lambda _ + (substitute* (find-files "generate-manpages" "\\.sh") + (("print \"#!/bin/sh") + (string-append "print \"#!" (which "sh"))))))))) + (native-inputs + (list coreutils-minimal help2man which)) (inputs - `(("lz4" ,lz4) - ("lzo" ,lzo) - ("xz" ,xz) - ("zlib" ,zlib) - ("zstd:lib" ,zstd "lib"))) + (list lz4 lzo xz zlib `(,zstd "lib"))) (home-page "https://github.com/plougher/squashfs-tools") (synopsis "Tools to create and extract squashfs file systems") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 14/24] gnu: shapelib: Update to 1.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265826093 (code B ref 74035); Sat, 26 Oct 2024 22:45:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:18 +0000 Received: from localhost ([127.0.0.1]:43053 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW5-0006mb-S5 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:18 -0400 Received: from 7.mo584.mail-out.ovh.net ([178.33.253.54]:43715) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW1-0006lu-T3 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:14 -0400 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.25.134]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSV5DlMz1Nmv for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:38 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-hnsxs (unknown [10.110.164.42]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 767861FDF1; Sat, 26 Oct 2024 22:43:38 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-hnsxs with ESMTPSA id YCfjAppwHWcP3wIANM4foQ (envelope-from ); Sat, 26 Oct 2024 22:43:38 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0020bd38f98-f6bd-40d0-81b1-d57aba23bbda, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:35 +0200 Message-ID: <20241026224300.30694-14-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8113797680205914850 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Z8DpA6Rm7qAaGkYqXvwOtUhxVCkkBu7c7a40oKHmYso=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982618; v=1; b=0nnD/gy8WGhkIhvt/quxoCb7MgZ8mluvkSgJEk8o6ZX3InWfRRvy73FAbdmpQP9KiDKKgTFt crti6pvoOJbSENyVIpIPRNydALbaiEKQOfePbVaGsfzIN3XA6Jeyp2oZhc3TqJO9miXyTIjRDsg nRvkSkclzzFmvVx9R7Z9tnEpYPq6+eifDZDZoTomq+0ElQcmwhQB4sUwUMnKBGmT3QmsOuOhPS1 J9spRtQlibDszDbk7Qx4AkQzx+3MZlI9byo07O6j+Z4ZWJtAxB86lEs7vH8cewRwu6mqgMjbh3p XZqJs4aMwdiCiw4RXBXzn4D4e70fvjYs8FBJM1u4dOoVg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-0699. * gnu/packages/geo.scm (shapelib): Update to 1.6.1. --- gnu/packages/geo.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/geo.scm b/gnu/packages/geo.scm index 5d120b3c98..affa50c515 100644 --- a/gnu/packages/geo.scm +++ b/gnu/packages/geo.scm @@ -2574,7 +2574,7 @@ (define-public readosm (define-public shapelib (package (name "shapelib") - (version "1.5.0") + (version "1.6.1") (source (origin (method git-fetch) @@ -2583,7 +2583,7 @@ (define-public shapelib (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1lzch0jf6yqhw391phhafzw4ghmiz98zkf698h4fmq109fa2vhqd")))) + (base32 "0l67gp1618lcw7fg2iclbh016cqyw85s3cmd3qzx6aw0jq19hj8n")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) @@ -2591,8 +2591,8 @@ (define-public shapelib (synopsis "Provides C library to write and update ESRI Shapefiles") (description "The Shapefile C Library provides the ability to write simple C programs -for reading, writing and updating (to a limited extent) ESRI Shapefiles, and the -associated attribute file (@file{.dbf}).") +for reading, writing and updating (to a limited extent) ESRI Shapefiles, and +the associated attribute file (@file{.dbf}).") (license license:gpl2+))) (define-public spatialite-tools -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 15/24] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267626164 (code B ref 74035); Sat, 26 Oct 2024 22:45:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:36 +0000 Received: from localhost ([127.0.0.1]:43069 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWN-0006nu-IO for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from 11.mo584.mail-out.ovh.net ([46.105.34.195]:44907) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mI-O6 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from director2.ghost.mail-out.ovh.net (unknown [10.109.139.217]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSZ0ZPrz1Nmv for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:42 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zrs9p (unknown [10.110.118.228]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 179C21FE47; Sat, 26 Oct 2024 22:43:39 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-zrs9p with ESMTPSA id VcZxOppwHWeNkhYAcVD5iw (envelope-from ); Sat, 26 Oct 2024 22:43:39 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003eca71070-c63f-4933-a920-c89048cc314f, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:36 +0200 Message-ID: <20241026224300.30694-15-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8114923579457069794 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhephffguedvffekiefffeeujefgfedvhfetueetvefggedvtdduudffheehvdeukeffnecuffhomhgrihhnpehgnhhomhgvrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=owoMQc4h4nyD8vs7AZyLnwpOJkDjgwTkvzRNTJzxe/o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982622; v=1; b=2/Hpaao1FQBj/rjz+yAbCmojeaiuvyDj51ERc3k/OQ+ucPYq56rrOnp3sVCfvniec1NRjrSQ OOLhGN2emH59iqYaWhAv+3izP16ZpPW3r9PTtDvIoaCpHimXdVqD+74w8FdcxVIwT9KElFAyUzz nVhs1NtQPy1E29BC1j0UDpKrZs3Jnqz+22BObLUmNLIwQejF9368RxMM2rmWU59sqkFXuA6Nw2E mJwerm/T8jxySl92a//3mFncGDfRenKITJjb6BKWlNyKR6zYEgBz/4cvZroOvyww3gxq3E8pWjf Hzed6YxEF+/UhhmSctx0APMk0ZDlrjXgv2DjBvqqLQsGw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-39360. * gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba. --- gnu/packages/gnome.scm | 45 ++++++++++++++++++++++-------------------- 1 file changed, 24 insertions(+), 21 deletions(-) diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm index 9b26819261..9abe433aa4 100644 --- a/gnu/packages/gnome.scm +++ b/gnu/packages/gnome.scm @@ -10591,28 +10591,31 @@ (define-public gsound (license license:lgpl2.1+))) (define-public libzapojit - (package - (name "libzapojit") - (version "0.0.3") - (source (origin - (method url-fetch) - (uri (string-append "mirror://gnome/sources/" name "/" - (version-major+minor version) "/" - name "-" version ".tar.xz")) - (sha256 - (base32 - "0zn3s7ryjc3k1abj4k55dr2na844l451nrg9s6cvnnhh569zj99x")))) - (build-system gnu-build-system) - (native-inputs - (list gobject-introspection intltool pkg-config)) - (inputs - (list gnome-online-accounts json-glib rest)) - (home-page "https://wiki.gnome.org/Projects/Zapojit") - (synopsis "Library for accessing SkyDrive and Hotmail") - (description - "Libzapojit is a GLib-based library for accessing online service APIs of + (let ((revision "1") + (commit "99d49bac5edc4afdcac742a0a142908e405597b0")) + (package + (name "libzapojit") + (version (git-version "0.0.3" revision commit)) + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://gitlab.gnome.org/Archive/libzapojit") + (commit commit))) + (file-name (git-file-name name version)) + (sha256 + (base32 "12frqg925rmic3rf37h5vs48xdy3mfi4ip24v0bl73h5sxy8n828")))) + (build-system gnu-build-system) + (native-inputs + (list gobject-introspection intltool pkg-config)) + (inputs + (list gnome-online-accounts json-glib rest)) + (home-page "https://wiki.gnome.org/Projects/Zapojit") + (synopsis "Library for accessing SkyDrive and Hotmail") + (description + "Libzapojit is a GLib-based library for accessing online service APIs of Microsoft SkyDrive and Hotmail, using their REST protocols.") - (license license:lgpl2.1+))) + (license license:lgpl2.1+)))) (define-public gnome-clocks (package -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 16/24] gnu: gifsicle: Update to 1.95. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267626171 (code B ref 74035); Sat, 26 Oct 2024 22:45:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:36 +0000 Received: from localhost ([127.0.0.1]:43071 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006nx-8f for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from 7.mo560.mail-out.ovh.net ([188.165.48.182]:45113) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWG-0006n5-0b for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.148.29]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSn34bcz1Tpp for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-q595r (unknown [10.110.113.119]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 3DEA41FD91; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-q595r with ESMTPSA id rnn2B6lwHWdYXAIAZhMXkw (envelope-from ); Sat, 26 Oct 2024 22:43:53 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004215fae8b-4d6d-4213-af71-742c23048316, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:37 +0200 Message-ID: <20241026224300.30694-16-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8118019806977647330 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfelhedvtdeffefhhfdttdelffeikeejheefvdduvdekueejgeeffedutdekffevnecuffhomhgrihhnpehltggufhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982633; v=1; b=d2VI4GWYeyZhcuibt9BnnAYwTM+v/5OBktg0y+URD4EdGtIoup8RUlOuMajlt4xQZLyoFjkV mbduhMN0qjRMNJ03F92sIcM9AAig4NHLds1JXrt5XOl4re+kLB49tXHWw7HcZPlcLbixEMnQbHI 93id11Fq24VDOZ0kaTigsP7oSiKs4jdztRe4Vuh2WC1Klz4f0C6n0qc4NhoF6jstfTlNt3IkWLT MVzrtlXPRMRHUQldrJCVjKFJQuVU7b7/AD9Dfc3Pv9HryoXJ5IEIgISut4/g+/paEidiDIxb3gp XoNmu0C9NTm/WNm7Z9gJbIIbJ2muzXzOEbF6lvh6QCyrQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-44821 and CVE-2023-46009. * gnu/packages/image.scm (gifsicle): Update to 1.95. --- gnu/packages/image.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index 7f17c71aef..0d6593dc21 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -2172,14 +2172,14 @@ (define-public swappy (define-public gifsicle (package (name "gifsicle") - (version "1.94") + (version "1.95") (source (origin (method url-fetch) (uri (string-append "https://www.lcdf.org/gifsicle/gifsicle-" version ".tar.gz")) (sha256 - (base32 "16zq5wd6fyjgy0p0mak15k3mh1zpqb9rg6gqfpg215kqq02p1jab")))) + (base32 "0l69gn562l7a1l10zz1bfs756ipd682idgpk60qs3llz013icwdj")))) (build-system gnu-build-system) (arguments '(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 17/24] gnu: sendmail: Update to 8.18.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726178 (code B ref 74035); Sat, 26 Oct 2024 22:45:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43073 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006o4-KQ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from 13.mo581.mail-out.ovh.net ([87.98.150.175]:42499) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWH-0006n7-76 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.108.17.3]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSp18vtz1JRr for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-l4qp4 (unknown [10.110.188.17]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id EB52F1FD59; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-l4qp4 with ESMTPSA id DPuNMqlwHWf/axkAxqAzmA (envelope-from ); Sat, 26 Oct 2024 22:43:53 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G0045ee948d4-eb55-4bce-9123-e47305118189, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:38 +0200 Message-ID: <20241026224300.30694-17-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8118301282106139362 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfduhedvgeeiieeifeelkeduhedtheetudelfeevvdeihfekfeekieeiffehveevnecuffhomhgrihhnpehsvghnughmrghilhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtudenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=nrWFafwgjABA9p+RKyIMsqhHNJKZat32odkcS7aorS4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982634; v=1; b=AzuUCUnjHB7VGTOB4gFYOXhAe5RyGOj9sJo+QGrlI59mdi6eKxnP54ESXOJkygUUvBpDrNqj xChUfgqzwxJ+7Ec3S/dEXra5s7//k9KzTtdG2LLagQEwet0Nwg4VnvS+79bm4knHsHiWxYCahre h9PlSsFjjMkbLVCCMUpkk210dgtFC/JUszi5Txdo7OufbBSlaG9U/UXzn0pvXuzvNwd3e/qsxOD Wc7TN0Zz0yMgCLz37cBjoTcgBjzMRECKLrGBX9Hjh5OqbHtMDLcresY4CcRRo24l11Z6W/nynD8 tbx7iRIlLaJniX//oqMNUqA4XKcdNvFGTdey+ml3VOU8Q== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. --- gnu/packages/mail.scm | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 77be7626a9..63e0f24534 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -3122,7 +3122,7 @@ (define-public mhonarc (define-public sendmail (package (name "sendmail") - (version "8.15.2") + (version "8.18.1") (source (origin (method url-fetch) @@ -3130,8 +3130,7 @@ (define-public sendmail "ftp://ftp.sendmail.org/pub/sendmail/sendmail." version ".tar.gz")) (sha256 - (base32 - "0fdl9ndmspqspdlmghzxlaqk56j3yajk52d7jxcg21b7sxglpy94")))) + (base32 "0w07iw4imp9wvczd2mijns7zxl8p1wk29b9yrzvhcj4fqc4z7wfb")))) (build-system gnu-build-system) (arguments `(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 18/24] gnu: openvpn: Update to 2.6.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726189 (code B ref 74035); Sat, 26 Oct 2024 22:45:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43075 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006oB-Vu for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:37 -0400 Received: from 5.mo550.mail-out.ovh.net ([178.33.45.107]:48733) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWH-0006nE-RG for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.140.200]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSp587vz1T9Y for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-rdg64 (unknown [10.110.178.25]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7A3FB1FDD5; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-rdg64 with ESMTPSA id vt/SF6pwHWcxGR4AGFRN/A (envelope-from ); Sat, 26 Oct 2024 22:43:54 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004506416ca-199d-4126-bd57-c28527a9d155, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:39 +0200 Message-ID: <20241026224300.30694-18-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8118301281888428770 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=0LEHvRvyTCXad2YSHo4l/HLEPV68T9gyWkeXTnK7aUg=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982634; v=1; b=Ofl4zg3ODrq2Jw6f8VwjeIxdI8Ob5Jt07JNCUJEsrpkeDaEDw+gjHds6dzTkOAxCkif8Lrwc GeCb2drZ/uuAsmVIS7gzrLs9EpYk0GmF0+OKfAZKE/ZXhY+OqEyjZR3tXdnhVzaboZytkGThal1 m7jwyVZA51lqrHR96etSWfnYI+gUIrvmRfdW4APufw0VoWXOGDaAx8cJRijnvzjt60QiPLxW0hE NWU7OW/beIdC6OH9QA4JueD4W0FMCMuU1vckpgpyfF/hZBoByM0edybhARtvszuRR9fRdSmWX1O d2ssmoS1vB01757f4EPBP1JQDrL1G90/eJCdHLUaaP0tQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thix fixes CVE-2024-24974, CVE-2024-27459 and CVE-2024-27903. * gnu/packages/vpn.scm (openvpn): Update to 2.6.12. --- gnu/packages/vpn.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/vpn.scm b/gnu/packages/vpn.scm index 9f36595bfd..193b247779 100644 --- a/gnu/packages/vpn.scm +++ b/gnu/packages/vpn.scm @@ -867,7 +867,7 @@ (define-public openfortivpn (define-public openvpn (package (name "openvpn") - (version "2.6.7") + (version "2.6.12") (source (origin (method url-fetch) (uri (string-append @@ -875,7 +875,7 @@ (define-public openvpn version ".tar.gz")) (sha256 (base32 - "04wr0g97nmv81javym8r99mglmb86v1i49xmnmzf938x1cs7g67f")))) + "0a8r3bvg4aic9b7dix0h7990g3j1gq17wd3w6vqk8vk8xgfhyq8w")))) (build-system gnu-build-system) (arguments '(#:configure-flags '("--enable-iproute2=yes"))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 19/24] gnu: youtube-dl: Deprecate package. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726197 (code B ref 74035); Sat, 26 Oct 2024 22:45:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43077 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oM-Cs for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:37 -0400 Received: from 6.mo575.mail-out.ovh.net ([46.105.63.100]:60799) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWI-0006nG-By for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director9.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSq525Lz1TFk for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:55 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.101.71]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7EFD11FD1C; Sat, 26 Oct 2024 22:43:55 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id HWm/F6twHWc6nRYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:55 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002684d0636-4536-4ee7-8c87-61e1e9d0a137, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:40 +0200 Message-ID: <20241026224300.30694-19-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8118582756140376802 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpeehnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Fbvo79ed6HVx+HAbstqLDElMELFCfE2fm7Cn/kC7x7A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982635; v=1; b=bIkYfg96Q2nj0dDs4Dz7A1y1BoElVsgAAQT/kVjTYGoNzv9Ge4cH/VrHH9v+LW8942FQG/12 kR1nJaYhJbVHymU9cM3rTEegNNbdpSpAGZlK1RAR6oNKCX2DSegFqQuLpsZWx5cNbvfFGm/KZBa 3IPAuORKBDJvqaVoDIE2cPYqIXeEP2Rr+yBBHjLLmSHH+u/wP/UbBpWTJcErF+Q6sWQIiykskWX zie65iC5nJ8Uo72G8WavB0yrAp6vb2lTgRLHUO13ic6G+SOLKbc0p76Ve3pqUJKSco+DuOUSft0 B56N5IX2PhhwKhvpmIkq/xmP629C4SG8pFzwcD9YHyBuw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This package is not developped anymore. * gnu/packages/video.scm (youtube-dl): Deprecate package. --- gnu/packages/video.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm index 92c0acef3c..9fca994b54 100644 --- a/gnu/packages/video.scm +++ b/gnu/packages/video.scm @@ -93,6 +93,7 @@ (define-module (gnu packages video) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix utils) #:use-module (guix packages) + #:use-module (guix deprecation) #:use-module (guix download) #:use-module (guix gexp) #:use-module (guix git-download) @@ -3084,7 +3085,7 @@ (define-public yle-dl video streaming services of the Finnish national broadcasting company Yle.") (license license:gpl3+))) -(define-public youtube-dl +(define-deprecated/public youtube-dl #f (package (name "youtube-dl") (version "2021.12.17") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 20/24] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267826205 (code B ref 74035); Sat, 26 Oct 2024 22:45:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:38 +0000 Received: from localhost ([127.0.0.1]:43079 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oU-Ob for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:38 -0400 Received: from 18.mo582.mail-out.ovh.net ([46.105.73.110]:59593) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWL-0006nZ-SY for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSt4QFsz1L5D for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:58 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.96.188]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 5DB0A1FD91; Sat, 26 Oct 2024 22:43:58 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id XP1WEK5wHWdDnRYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:58 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002ddec64d4-163d-46fa-9755-117b99a7a3c6, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:41 +0200 Message-ID: <20241026224300.30694-20-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8119427179217543906 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvleelgeeffeetleekueegvdfhtedvueffiefhkedtleejkeduveelgfdufeduleenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=HJTQtCycCpSf9vJMXGVPbShzezeUn1n31dE0uCrODeI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982638; v=1; b=r2L4JAo/91uzWsrKMI3GXAWVqGa9z04tYeL4Y5RWeVYWzy6m50rH+cB+dzJV2AgUXmyRotmk WC4PTxN2j9Vb4zpA8qoXXc2Fmda+DM4Wsp8Qc4qQjCHmuk9p0Q5Pxg9CAd4c2AgWg5zmuosEWcs mIThd7xubi0uV0zBNALuq58pM334BNT8C6vKcJzgtkyIOKjqmy6aVDhY8uD9PKvEBfVCYnHz+OI Luxzvn1OTTpjjhXr8EovhBBAKo1SMvnmAFs0Y3WhmhBzaVnw5SkOgwVRGJlMjwmjn/6EDTaJQM4 GGXviUNaq8m9grzEE+QxAse4IMJqjfdLp24XYT1RLpnXw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-26981. * gnu/packages/language.scm (liblouis): Update to 3.31.0. [arguments]: Improve style using gexps. [native-inputs]: Rewrite and replace python-wrapper by python. --- gnu/packages/language.scm | 47 ++++++++++++++++++--------------------- 1 file changed, 22 insertions(+), 25 deletions(-) diff --git a/gnu/packages/language.scm b/gnu/packages/language.scm index 78fcba4287..6a5e7927b4 100644 --- a/gnu/packages/language.scm +++ b/gnu/packages/language.scm @@ -10,6 +10,7 @@ ;;; Copyright © 2023 gemmaro ;;; Copyright © 2024 Efraim Flashner ;;; Copyright © 2024 Charles +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -338,7 +339,7 @@ (define-public libchewing (define-public liblouis (package (name "liblouis") - (version "3.15.0") + (version "3.31.0") (source (origin (method git-fetch) @@ -348,34 +349,30 @@ (define-public liblouis (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1ljy5xsy7vf2r0ix0d7bqcr6qvr6897f8madsx9zlm1mrj31n5px")))) + (base32 "02bga2l4jiyrgfqdl27wszz5yd6h80n2dmq3p6nb2br83jywisfh")))) (build-system gnu-build-system) (outputs '("out" "bin" "doc" "python")) (arguments - `(#:configure-flags - (list - "--disable-static" - "--enable-ucs4") - #:phases - (modify-phases %standard-phases - (add-after 'install 'install-python-extension - (lambda* (#:key outputs #:allow-other-keys) - (with-directory-excursion "python" - (invoke "python" "setup.py" "install" - (string-append "--prefix=" - (assoc-ref outputs "python")) - "--root=/"))))))) + (list + #:configure-flags #~(list "--disable-static" "--enable-ucs4") + #:phases + #~(modify-phases %standard-phases + (add-after 'install 'install-python-extension + (lambda _ + (with-directory-excursion "python" + (invoke "python3" "setup.py" "install" "--root=/" + (string-append "--prefix=" #$output:python)))))))) (native-inputs - `(("autoconf" ,autoconf) - ("automake" ,automake) - ("clang-format" ,clang) - ("help2man" ,help2man) - ("libtool" ,libtool) - ("libyaml" ,libyaml) - ("makeinfo" ,texinfo) - ("perl" ,perl) - ("pkg-config" ,pkg-config) - ("python" ,python-wrapper))) + (list autoconf + automake + clang + help2man + libtool + libyaml + texinfo + perl + pkg-config + python)) (synopsis "Braille translator and back-translator") (description "Liblouis is a braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 22/24] gnu: Add sexpp. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267926218 (code B ref 74035); Sat, 26 Oct 2024 22:45:08 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:39 +0000 Received: from localhost ([127.0.0.1]:43083 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWQ-0006ob-Ek for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from 2.mo576.mail-out.ovh.net ([178.33.251.80]:46759) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWM-0006nc-I5 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.9.204]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSw0LTFz1spm for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:00 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-rtzxm (unknown [10.110.96.188]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id DD6BE1FDF5; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-rtzxm with ESMTPSA id K3uwL69wHWc7UAAAn319VA (envelope-from ); Sat, 26 Oct 2024 22:43:59 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001955793a0-f7c6-4c83-ae0c-d59393a4ce18, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:43 +0200 Message-ID: <20241026224300.30694-22-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8119990129108771554 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvffehgeekhfekgffgleehffetiefggeeitdduteekfffhkeehveejfeejledtieenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=U92cQpcMIFFvtafY+xePsreR0YecBHq4Z2qiMxsXF34=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982640; v=1; b=y4NrT/CwvppB8qbVSHG+cNbCEOvCO0vATe8i9wmyQyQNiWP6L2lMBRuln5Hz/TG8eq7niJ0X lKs2B97wNcPg6yUkCw9/tQma+ZJYB/jLHA/jmG/BIwiPWopEppXLBPtTztvj+OfbY7G3nxsoN+D +SJyau5jubpG2Po8JjGJxuY+qHLB1x/RpbAsxqsqNgv1oIOPWziN2IjY8qGWCwcZujSUgCTnjQF Z0GJfMNGw/xjNiXh2XBc9ZKJM3wmXZs+XYBctyvycYaQp+LhMBMZI4F/meHydhUqWXpaFf3/HSV etIV4CThVrViqiCwvKv85Ri6V4TPblGNPqNcBnx9HQX0g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/openpgp.scm (sexpp): New variable. --- gnu/packages/openpgp.scm | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 9b6f04b407..356908ab1f 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -1,5 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2020 Justus Winter +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -157,3 +158,26 @@ (define-public rnp license:asl2.0 ;; Nominet UK's BSD 3-Clause License (netpgp). license:bsd-3))))) + +(define-public sexpp + (package + (name "sexpp") + (version "0.9.0") + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://github.com/rnpgp/sexpp") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) + (sha256 + (base32 "16y9f42w6ay3w0s23xmigqm0qi1swdfvc93g2xn3xkg1r4kpmnwq")))) + (build-system cmake-build-system) + (arguments + (list #:configure-flags '(list "-DDOWNLOAD_GTEST=off"))) + (native-inputs (list googletest pkg-config)) + (home-page "https://github.com/rnpgp/sexpp") + (synopsis "C++ library for S-expressions") + (description + "This package provides a C++ library for working with S-Expressions.") + (license license:expat))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 21/24] gnu: unicorn: Update to 2.1.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998268026232 (code B ref 74035); Sat, 26 Oct 2024 22:45:08 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:40 +0000 Received: from localhost ([127.0.0.1]:43087 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWR-0006ol-6f for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from 3.mo560.mail-out.ovh.net ([46.105.58.226]:47765) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWM-0006na-IP for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSv3ypGz1Tpl for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zrs9p (unknown [10.110.118.154]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 66AEE1FD24; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-zrs9p with ESMTPSA id hL3CD69wHWe+khYAcVD5iw (envelope-from ); Sat, 26 Oct 2024 22:43:59 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R00448903796-a4a5-4da5-be7c-325bff59200c, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:42 +0200 Message-ID: <20241026224300.30694-21-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8119708655365317346 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnheptddtjeefffegiedthfevuedujedtffffueeffeekvdduheelleettddvffeigfelnecuffhomhgrihhnpehunhhitghorhhnqdgvnhhgihhnvgdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=MuQFZQbEBKTGfqy1DzhCyVd+c8xzDEBmFMZXC+f8L3o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982639; v=1; b=w4LLG5evVM3pZcX2M/nRIZv+vW61z8YR3Hbvd8zuEakU4K+XzGxMY6BrSpm9LzYpTpN2iEIN oQqwT+Y33lPkQoGXkiIlIChSp7a0g9M6Gnbhqqk2sf1dikjvSrdvoou6OxBxC4bAepYdpsCcKBW VwVSxH3weWCrl/HOTPa/qiwbVPAVl5L1CAE2yWT6zlQdhaB8cXo53FBKB/Sb2h9Yze/L7zJb4Wf GEGO+v4J3j+bvtaQxfOCr4fFW8YcfM+wumZao91OMXIkbPaotLNpZiXyIKhHQM2+CdAuQHjuQbw QU49XHWH0Cr0DcnDxO3zpTSC43fEmFXCNiri0/oOUhexQ== X-Spam-Score: 0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) Thix fixes CVE-2021-4296. * gnu/packages/emulators.scm (unicorn): Update to 2.1.1. --- gnu/packages/emulators.scm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/gnu/packages/emulators.scm b/gnu/packages/emulators.scm index f0a60c0b49..948e588c4c 100644 --- a/gnu/packages/emulators.scm +++ b/gnu/packages/emulators.scm @@ -3508,13 +3508,18 @@ (define-public zsnes (define-public unicorn (package (name "unicorn") - (version "2.0.1.post1") + (version "2.1.1") (source (origin (method url-fetch) (uri (pypi-uri name version)) (sha256 - (base32 "0mlfs8qfi0clyncfkbxp6in0cpl747510i6bqymwid43xcirbikz")))) + (base32 "18sbrycr62wcs3a68a9q76ihpahfsd4bn3mryvyhimwwn1342kwh")) + (modules '((guix build utils))) + ;; cmake files are not in the cmake dir in pypi + (snippet #~(substitute* "src/CMakeLists.txt" + (("include\\(cmake/") + "include("))))) (build-system pyproject-build-system) (native-inputs (list cmake pkg-config)) (home-page "https://www.unicorn-engine.org") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 23/24] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:09 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998270326299 (code B ref 74035); Sat, 26 Oct 2024 22:45:09 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:45:03 +0000 Received: from localhost ([127.0.0.1]:43089 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006pu-1C for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:45:02 -0400 Received: from 19.mo581.mail-out.ovh.net ([178.33.251.118]:44071) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oG-Oe for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.9.204]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSy53llz1Hr9 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:02 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-shhdw (unknown [10.110.178.140]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8DCED1FDF1; Sat, 26 Oct 2024 22:44:02 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-shhdw with ESMTPSA id kVaIG7JwHWdTNgEA9m+g4Q (envelope-from ); Sat, 26 Oct 2024 22:44:02 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G00490fb0991-3d9c-48b0-9922-bb6e750c6cd5, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:44 +0200 Message-ID: <20241026224300.30694-23-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8120553079084409570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgepheenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ESl+kZ+ZXHMYLkX1kb3CXN6RS7I6+Z/oSRoSul3YtTs=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982642; v=1; b=Eg3xbg+hZVTxwUjnahg45i/hdGUW3TO7Se2cAT0vasO3fqn2JJI9qHbbTFaCMJ1Ze3uWsaLR qBNAxupXegf+etn/1LtMduTYc+VFEUjvJ9oNfVAQpXUOPUfB3FhuRr66h2KyePyTz8kj2XBpnAX vk7BrThB6NZ2IXTAPPgv1qlG3TMgaAX1Jz8+2B7m81ZMhrrh2y0hk8xCZ0ADlwJBLh8LUlUF76N SLjdOfnTjHGd6+1KxxR4vpN0Xu75iWzBpzuetFZXt7vmZUyOIzv9kVPYyo7BiaL3c1sunes4QGR XK1LJkR/kCXUnYjQY4Nj9RYetqhWgnTN39yOGzL7DszSQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-29479 and CVE-2023-29480. * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. [arguments]: Improve style using gexps. <#:phases>: Add phase 'inject-sexpp-source. [inputs]: Add sexpp. --- gnu/packages/openpgp.scm | 52 +++++++++++++++++++++++----------------- 1 file changed, 30 insertions(+), 22 deletions(-) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 356908ab1f..baf786c5ee 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -23,6 +23,7 @@ (define-module (gnu packages openpgp) #:use-module (guix git-download) #:use-module (guix build-system cmake) #:use-module (guix build-system gnu) + #:use-module (guix gexp) #:use-module ((guix licenses) #:prefix license:) #:use-module (gnu packages) #:use-module (gnu packages check) @@ -98,10 +99,10 @@ (define-public dkgpg (license license:gpl2+))) (define-public rnp - (let ((day-of-release "2022-09-22")) + (let ((day-of-release "2024-05-14")) (package (name "rnp") - (version "0.16.2") + (version "0.17.1") (source (origin (method git-fetch) (uri (git-reference @@ -110,33 +111,40 @@ (define-public rnp (file-name (git-file-name name version)) (sha256 (base32 - "13z5kxm48a72w4m2crwgdjdng4a4pwxsd72r2z3a4pcakfp2swi8")))) + "052872b6a88vkcc58alxcm532y6dra5qqd997jga41v72h3pnj4d")))) (build-system cmake-build-system) - (arguments `(#:configure-flags - '("-DBUILD_SHARED_LIBS=on" - "-DBUILD_TESTING=on" - "-DDOWNLOAD_GTEST=off" - "-DDOWNLOAD_RUBYRNP=off") - #:phases - (modify-phases %standard-phases - (add-after 'unpack 'patch-tests - (lambda _ - (substitute* "src/tests/support.cpp" - (("\"cp\"") (search-input-file inputs "/bin/cp"))))) - (replace 'check - (lambda* (#:key tests? #:allow-other-keys) - (when tests? - ;; Some OpenPGP certificates used by the tests expire. - ;; To work around that, set the time to roughly the - ;; release date. - (invoke "faketime" ,day-of-release "make" "test"))))))) + (arguments + (list + #:configure-flags + ''("-DBUILD_SHARED_LIBS=on" + "-DBUILD_TESTING=on" + "-DDOWNLOAD_GTEST=off" + "-DDOWNLOAD_RUBYRNP=off") + #:phases + #~(modify-phases %standard-phases + (add-after 'unpack 'patch-tests + (lambda _ + (substitute* "src/tests/support.cpp" + (("\"cp\"") (search-input-file inputs "/bin/cp"))))) + (add-after 'unpack 'inject-sexpp-source + (lambda _ + (rmdir "src/libsexpp") + (symlink #$(package-source (this-package-input "sexpp")) + "src/libsexpp"))) + (replace 'check + (lambda* (#:key tests? #:allow-other-keys) + (when tests? + ;; Some OpenPGP certificates used by the tests expire. + ;; To work around that, set the time to roughly the + ;; release date. + (invoke "faketime" #$day-of-release "make" "test"))))))) (native-inputs (list gnupg ; for tests googletest ; for tests libfaketime ; for tests pkg-config python)) - (inputs (list botan bzip2 json-c zlib)) + (inputs (list botan bzip2 json-c sexpp zlib)) (synopsis "RFC4880-compliant OpenPGP library written in C++") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 24/24] gnu: cjson: Update to 1.7.18. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998270326308 (code B ref 74035); Sat, 26 Oct 2024 22:45:10 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:45:03 +0000 Received: from localhost ([127.0.0.1]:43093 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006q8-Pp for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:45:03 -0400 Received: from 9.mo561.mail-out.ovh.net ([87.98.184.141]:59943) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWQ-0006oS-Dx for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.108.17.183]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSz2Xwzz1P5G for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:03 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-7f7jj (unknown [10.110.101.176]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 252E81FD47; Sat, 26 Oct 2024 22:44:03 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-7f7jj with ESMTPSA id uXq1ArNwHWcU5AIALPKLSA (envelope-from ); Sat, 26 Oct 2024 22:44:03 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R006202cc4f4-0097-4981-a5f4-aa5298767451, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 27 Oct 2024 00:42:45 +0200 Message-ID: <20241026224300.30694-24-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 8120834553188377314 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=plDzbXvIvZ/KKZYFtVfcqL9jk++RjNlqv/6MLA6yRLY=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982643; v=1; b=xlnfu0TZBhgNJccXegbpzreRVdgAMPpHH0yMicQP9JGnCJAwTQXICqvtHgOXofGczhN1OBSy 5pULu6Ea5rrUsoP8tWlmz0RPMKkllsgTXMDbaFDbk6gD/1gzlE9SsElvm/M2cP/guNgPOnAesDs I6ca4Gqb2fqwvXmZ/A1JNvgvjedjjHAvm7lxHml8UiTfZHEE3REuOSAxfIbd8sfTSAYOGsb4Yb/ iJNaX2TDphqoGK4w6RhS/9IFIHP2Gy1eUdUn9C1H41KdqxYfSH5RlrPk1D5e/nbhWw9rU5KyWq8 RrXPU3hr57sSSeN3B4MN78QqA3sLAjTInA/9TQ3OHnn1w== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-50471 and CVE-2023-50472. * gnu/packages/javascript.scm (cjson): Update to 1.7.18. --- gnu/packages/javascript.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/javascript.scm b/gnu/packages/javascript.scm index 4f97dcfef6..b48acf47dc 100644 --- a/gnu/packages/javascript.scm +++ b/gnu/packages/javascript.scm @@ -49,7 +49,7 @@ (define-module (gnu packages javascript) (define-public cjson (package (name "cjson") - (version "1.7.16") + (version "1.7.18") (source (origin (method git-fetch) (uri (git-reference @@ -57,7 +57,7 @@ (define-public cjson (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "00599lzzb0vszk317n0gln7wizdpchy4warxgpj3khrir73pphbb")))) + (base32 "08p37q4i3za3dgz7wynma1fh8y4rq7pyzyjzcda710nxrmsm1pyv")))) (build-system cmake-build-system) (arguments `(#:configure-flags '("-DENABLE_CJSON_UTILS=On"))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 01/26] gnu: libyang: Update to 3.4.2. [security fixes] References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:03:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978014417 (code B ref 74035); Sun, 03 Nov 2024 16:03:02 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:00 +0000 Received: from localhost ([127.0.0.1]:33050 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d47-0003kH-I1 for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:00 -0500 Received: from 4.mo584.mail-out.ovh.net ([178.32.98.131]:36449) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d43-0003k0-61 for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:02:58 -0500 Received: from director2.ghost.mail-out.ovh.net (unknown [10.109.140.140]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBN5fbXz1MCx for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:52 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-m6jpx (unknown [10.111.182.37]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4B4841FE39; Sun, 3 Nov 2024 16:02:52 +0000 (UTC) Received: from ngraves.fr ([37.59.142.95]) by ghost-submission-5b5ff79f4f-m6jpx with ESMTPSA id zfWiOqueJ2ejJDcAg9Vu6w (envelope-from ); Sun, 03 Nov 2024 16:02:52 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-95G001f408cd33-4542-43a3-8a2a-ec108e6da4b2, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:01:56 +0100 Message-ID: <20241103160239.6772-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11433513556337681122 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepteeffefhfffhjeevleeuvdehgffgveekheeuhfekhfehuefgheffhedugfegleeinecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeegpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=CLQi+02wDItFQB7VB72+N8zD8BtRWu6etjDWd9d1g1Y=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649772; v=1; b=zqwVbwPo2yZr0nB9hwpTlcJ/qAG3zDoJurIKJ79MvNtHIrwfhtlxNM4WGYYJ8mofjRDs5Os8 qh16SDzBxAszQ/9/7k+ER40osX08wUYau83IVirb0USl+wZJH+nnMOwNo26/aTUyjotC3CsSuFA 8A/k9JiC3PA3fecXEkRiTo9WvmefXK37Kl31wyuBLSwGunNNX9CfgUJrZXaEFrTDPIEMlf8YokG ZlniOhV4t6JM9A/Lx6txsmxMDn3Tnjs4rBWcXvnTqwzSulcpWhSdlQ8NT75/pvRsS9enDajrr1L 4o3XnmBwQjXdJxnlxKU0fIIg1ltBKm8h+MSwcfZVEMWeA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-28902, CVE-2021-28903, CVE-2021-28904, CVE-2021-28905 and CVE-2021-28906. * gnu/packages/networking.scm (libyang): Update to 3.4.2. --- gnu/packages/networking.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 8481e2d2f4..17d4072ee0 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -4238,7 +4238,7 @@ (define-public iwgtk (define-public libyang (package (name "libyang") - (version "1.0.215") + (version "3.4.2") (source (origin (method git-fetch) (uri (git-reference @@ -4247,12 +4247,12 @@ (define-public libyang (file-name (git-file-name name version)) (sha256 (base32 - "0mrs2ppmq77z8sbqgm2w0rl9bfgybd6bcxanakfww4chih6cy0dw")))) + "07skjr3r4na12kadca2dyk45clpcpnp4zkkwfaa8sqyslx7vhj56")))) (build-system cmake-build-system) (arguments `(#:configure-flags (list "-DENABLE_BUILD_TESTS=ON" "-DENABLE_LYD_PRIV=ON"))) - (propagated-inputs (list pcre)) + (propagated-inputs (list pcre2)) (native-inputs (list cmocka pkg-config)) (home-page "https://github.com/CESNET/libyang") (synopsis "YANG data modelling language library") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 02/26] gnu: python-django-4.2: Update to 4.2.16. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978214458 (code B ref 74035); Sun, 03 Nov 2024 16:04:01 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:02 +0000 Received: from localhost ([127.0.0.1]:33054 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4A-0003l1-9Y for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:02 -0500 Received: from 15.mo550.mail-out.ovh.net ([188.165.38.232]:50153) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d43-0003k3-Ki for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:02:59 -0500 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.140.140]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBQ3Knmz1SwX for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-hhzfg (unknown [10.110.168.82]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 9415F1FD64; Sun, 3 Nov 2024 16:02:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-hhzfg with ESMTPSA id d7JwFq2eJ2d5ewEA9h5ysg (envelope-from ); Sun, 03 Nov 2024 16:02:53 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G0058b1ba828-5bfb-41e3-b340-56554eb4b60b, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:01:57 +0100 Message-ID: <20241103160239.6772-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11434076507710874338 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=pxk7UZfXkYvn1LkT9YH2e2k0/sOL0hU4dQ8JC7xa7pM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649774; v=1; b=ZvN+QM7296OGXfyPbg892c81jFm7owRvrJaJYKEq/3Ig2QbuJrLASdImsaMBQ/YIKg3oId2c JBbRf29msDQuU9WvYS2QoSpDkSS3l7Gb4a5vNUIbzxhnBIlUFQa67gh0978c2DEVyEZKybykoMJ EvYDaPPoEfnQWlROql4vtKwP4y6/KAX3rx1J08vmnRjJ2zkYREIHXzZgqQ6HvuFhFIC3yMIwLhb JgThHGNQZchZ6HUr8H3Y/O0JdfDAjZLfofez2QSCcGY8cVk5dmrmo/V1cZ2xp/ROSAboG20VBl3 C6UTv6Kxh+ocgeL/Eun9QMOVQ+lXe6mORJiffNn2ZZ03g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231, CVE-2023-43665 and CVE-2023-46695. * gnu/packages/django.scm (python-django-4.2): Update to 4.2.16. [properties]: Add lint-hidden-cve property. --- gnu/packages/django.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/django.scm b/gnu/packages/django.scm index 4404c8368d..4cf043f7c1 100644 --- a/gnu/packages/django.scm +++ b/gnu/packages/django.scm @@ -57,13 +57,13 @@ (define-module (gnu packages django) (define-public python-django-4.2 (package (name "python-django") - (version "4.2.5") + (version "4.2.16") (source (origin (method url-fetch) (uri (pypi-uri "Django" version)) (sha256 (base32 - "1ha6c5j3pizbsfzw37r52lvdz8z5lblq4iwa99mpkdzz92aiqp2y")))) + "1b8xgwg3gjr974j60x3vgcpp85cg5dwhzqdpdbl8qh3cg311c5kg")))) (build-system pyproject-build-system) (arguments '(#:test-flags @@ -140,7 +140,9 @@ (define-public python-django-4.2 any Web site. Django focuses on automating as much as possible and adhering to the @dfn{don't repeat yourself} (DRY) principle.") (license license:bsd-3) - (properties `((cpe-name . "django"))))) + (properties `((cpe-name . "django") + ;; This CVE seems fixed since 4.2.1. + (lint-hidden-cve . ("CVE-2023-31047")))))) (define-public python-django-3.2 (package -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 04/26] gnu: maradns: Improve style. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978314475 (code B ref 74035); Sun, 03 Nov 2024 16:04:02 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:03 +0000 Received: from localhost ([127.0.0.1]:33057 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4A-0003l9-OI for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:03 -0500 Received: from 14.mo582.mail-out.ovh.net ([46.105.56.113]:46543) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d46-0003k7-0B for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:00 -0500 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.139.43]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBS5kVTz1H7v for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:56 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-8l527 (unknown [10.108.42.231]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4A7C71FE91; Sun, 3 Nov 2024 16:02:56 +0000 (UTC) Received: from ngraves.fr ([37.59.142.105]) by ghost-submission-5b5ff79f4f-8l527 with ESMTPSA id 2ui/AbCeJ2coSgAAMeK9BA (envelope-from ); Sun, 03 Nov 2024 16:02:56 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-105G00689bd4d6a-85e1-4513-89cf-2748255edb15, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:01:59 +0100 Message-ID: <20241103160239.6772-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11434639454083277538 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=amrZS3GarlmkVIj6HiT3MN4ghng6ibDQEQGAPgPZ/3A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649776; v=1; b=ttvPTsAQEbz67yVi8Q0NcBgIyXGceapwup88hvivfNpukcXxyuvYd82d7uJ33I5ThDCout0D XgbOASDKKy2LGfvLSxLsPFS5yLLeH3RUrVA8cIUnX619Fkx5VKak9IXX+nVmGykTh2ATrWOX3+p u95Wbb/qhRCsjy8Xe9VdmbTiPGxt3eUQ9/Hd2dsDvWn+hyE9GhBQVeReN90kjGkKUTyxoPTeju3 zNQ+nMT5cUD86Gdtch4g1+Ez1qcEkS6Ew7fFSL5prx5xY+TVcA97P4h7EyrNTWHYApVTFAtffsH XmovlQ/UlcSZftfbHTFbAFvONrrVhHbXRA0NVihah5Wog== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/dns.scm (maradns)[arguments]: Use gexps. --- gnu/packages/dns.scm | 58 ++++++++++++++++++++++---------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bd2df30f01..7a78fb0308 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1192,35 +1192,35 @@ (define-public maradns (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; need to be root to run tests - #:make-flags - (list - ,(string-append "CC=" (cc-for-target)) - (string-append "PREFIX=" %output) - (string-append "RPM_BUILD_ROOT=" %output)) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda* (#:key native-inputs target #:allow-other-keys) - ;; make_32bit_tables generates a header file that is used during - ;; compilation. Hence, during cross compilation, it should be - ;; built for the host system. - (when target - (substitute* "rng/Makefile" - (("\\$\\(CC\\) -o make_32bit_tables") - (string-append (assoc-ref native-inputs "gcc") - "/bin/gcc -o make_32bit_tables")))) - (invoke "./configure"))) - (add-before 'install 'create-install-directories - (lambda* (#:key outputs #:allow-other-keys) - (let ((out (assoc-ref outputs "out"))) - (for-each (lambda (dir) - (mkdir-p (string-append out dir))) - (list "/bin" "/sbin" "/etc" - "/share/man/man1" - "/share/man/man5" - "/share/man/man8")) - #t)))))) + (list + #:tests? #f ; need to be root to run tests + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + (string-append "PREFIX=" #$output) + (string-append "RPM_BUILD_ROOT=" #$output)) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda* (#:key native-inputs target #:allow-other-keys) + ;; make_32bit_tables generates a header file that is used during + ;; compilation. Hence, during cross compilation, it should be + ;; built for the host system. + (when target + (substitute* "rng/Makefile" + (("\\$\\(CC\\) -o make_32bit_tables") + (string-append (search-input-file native-inputs "/bin/gcc") + " -o make_32bit_tables")))) + ;; ./configure doesn't support default flags + (invoke "./configure"))) + (add-before 'install 'create-install-directories + (lambda _ + (for-each (lambda (dir) + (mkdir-p (string-append #$output dir))) + (list "/bin" "/sbin" "/etc" + "/share/man/man1" + "/share/man/man5" + "/share/man/man8"))))))) (home-page "https://maradns.samiam.org") (synopsis "Small lightweight DNS server") (description "MaraDNS is a small and lightweight DNS server. MaraDNS -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 03/26] gnu: maradns: Update to 3.5.0036. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978414483 (code B ref 74035); Sun, 03 Nov 2024 16:04:02 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:04 +0000 Received: from localhost ([127.0.0.1]:33062 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4B-0003lQ-Hb for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:04 -0500 Received: from 1.mo560.mail-out.ovh.net ([46.105.63.121]:45749) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d45-0003k6-MI for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:00 -0500 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.17.189]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBR4cHlz1Z8q for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:55 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nxhwm (unknown [10.110.101.71]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 10E231FDE8; Sun, 3 Nov 2024 16:02:54 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-nxhwm with ESMTPSA id W0TBM66eJ2fswQwAuW5ffQ (envelope-from ); Sun, 03 Nov 2024 16:02:54 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G00409255384-c1d1-4984-82fe-6dc38f33b1c1, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:01:58 +0100 Message-ID: <20241103160239.6772-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11434357980449006306 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtudenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=onnxrFb5nK8ls90p7kXO3kCbBG6qTED88gtXfuvLivE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649775; v=1; b=eB+Oqk9VmIubC7XdHtJh7qrJStQ8ovlYnjzBl9xObRc5/WOjRcUy4e4xFcio1Xn7tzWNqua6 H6wKKWMaB5DqLfQJ1rhcHL1Up83c82fNpX8FO44pvj8oI/E2uF3KTF7GW5g3v9OPIZyubAjnaS/ b6DcR/mSj2Y1eDeTLRLAyb8JBbnHqZXkUpXmXvgwPiGamWVVxPbHBxcbX0wKNj5NrQD885cc2mH zgY9pp7QiSK9S3LI9LFs4cKek8tTQFVcZK+dfqVqf+nwKV51FIUZBNdrJFRCApuBExjNdTfap4K Pd4gVRh49S9Nh41YxbrnPvkRsqqRtgz4oQyOw3e+XZ+aw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-31137. * gnu/packages/dns.scm (maradns): Update to 3.5.0036. [properties]: Add release-monitoring-url property. --- gnu/packages/dns.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index e911a142ef..bd2df30f01 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1181,7 +1181,7 @@ (define-public public-suffix-list (define-public maradns (package (name "maradns") - (version "3.5.0022") + (version "3.5.0036") (source (origin (method url-fetch) @@ -1189,7 +1189,7 @@ (define-public maradns (version-major+minor version) "/" version "/maradns-" version ".tar.xz")) (sha256 - (base32 "1sw267jxxxngjcar8cj3jpxnpiz0szgkhlz5l46c67qs690w9kdi")))) + (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments `(#:tests? #f ; need to be root to run tests @@ -1226,6 +1226,8 @@ (define-public maradns (description "MaraDNS is a small and lightweight DNS server. MaraDNS consists of a UDP-only authoritative DNS server for hosting domains, and a UDP and TCP-capable recursive DNS server for finding domains on the internet.") + (properties '((release-monitoring-url + . "https://maradns.samiam.org/download.html"))) (license license:bsd-2))) (define-public openresolv -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 05/26] gnu: libmobi: Update to 0.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978414490 (code B ref 74035); Sun, 03 Nov 2024 16:04:03 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:04 +0000 Received: from localhost ([127.0.0.1]:33064 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4C-0003lY-8N for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:04 -0500 Received: from 10.mo581.mail-out.ovh.net ([178.33.250.56]:35511) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d47-0003k8-Ci for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:00 -0500 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.2.97]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBV00wLz1Fx0 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:57 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-rcxd7 (unknown [10.108.54.8]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id AB9E51FD42; Sun, 3 Nov 2024 16:02:57 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-rcxd7 with ESMTPSA id zwbkEbGeJ2eggQAAJ3zupw (envelope-from ); Sun, 03 Nov 2024 16:02:57 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G004d6da10f7-b073-492f-9365-f3a4fdd5f18c, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:00 +0100 Message-ID: <20241103160239.6772-5-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11434920930151817954 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=wseqx7spf4lhsH68MqgOQ/QcG6moMZQns/hENydGodU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649778; v=1; b=ogVK2AdO2aDDoksRDUUMsdDt3PFUeeH8lKjsibHWqQu32gjy9adl1z3jQ3q8+s/TzpZ8V3nZ Vbrpj/JLkJ+i1lDCs4J1K8MWrkJ7ShIks0TwtXIYOHKglPWMIJNuVchPAp6JWs4gXZe/5ZZrBey QzkUdfqsaA0pjIQyCZ5HSLexwYzzC8O2CQbnOx39xReR3tFHi6grdCa7p8+PNNnFhoJlPyqEAN6 B9H+/RGKqb4B5tTN1ooQKZ98SSZ4sPRpUN/8RLXlSz7bvyx4uUFxahe8RHzl9wm/5ImnmT9rDEr IQeuTb0yiMdgZXQZUcgsB947GN+yno0TdWTKSaGguvrGA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908, CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751, CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889. * gnu/packages/ebook.scm (libmobi): Update to 0.12. --- gnu/packages/ebook.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ebook.scm b/gnu/packages/ebook.scm index dc30c98fdf..bf8dcfad09 100644 --- a/gnu/packages/ebook.scm +++ b/gnu/packages/ebook.scm @@ -648,7 +648,7 @@ (define-public xchm (define-public libmobi (package (name "libmobi") - (version "0.6") + (version "0.12") (source (origin (method git-fetch) (uri (git-reference @@ -657,7 +657,7 @@ (define-public libmobi (file-name (git-file-name name version)) (sha256 (base32 - "0yps72cm609xn2k7alflkdhp9kgr1w7zzyxjygz0n1kqrdcplihh")))) + "0cwya9n0rd97ai0fcqjwq7b3sjzigf3ywp7bnkbbw541f3knpds9")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 06/26] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978514497 (code B ref 74035); Sun, 03 Nov 2024 16:04:03 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:05 +0000 Received: from localhost ([127.0.0.1]:33066 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4C-0003lf-JJ for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:04 -0500 Received: from 5.mo576.mail-out.ovh.net ([46.105.43.105]:55269) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d48-0003kG-G9 for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:01 -0500 Received: from director6.ghost.mail-out.ovh.net (unknown [10.109.176.103]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBW0rqRz1mqk for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:02:59 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pp7xz (unknown [10.110.101.176]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id AECB91FD4D; Sun, 3 Nov 2024 16:02:58 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-pp7xz with ESMTPSA id 8c/DG7KeJ2dWYQsAcZBLcA (envelope-from ); Sun, 03 Nov 2024 16:02:58 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G0057b572cd1-7c86-4ea5-9398-e7ae067f4c27, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:01 +0100 Message-ID: <20241103160239.6772-6-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11435483881354617570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649779; v=1; b=sotfgHWMYEqJnXtmLZWuPckXcAK6j33LMQHNdsCpN+YkiH5YcJrMn8EXuqpn/Ew29a8alyXT Y+/YWZYy07Yz6Bytdq+socRZnzO0vxfjSoeK5ysKNby70VCuojb7jK0n022e3febiKy+1xmKR2f 6ZRQOME8e1F/MMPKEdlfGxwz7Yo+MQgx+hdH4WG2a9J4u44PmFMGN8sa5aT7xnJ2AlV3ExFXcXR JEPeqf+1HjoR05sLKsTAa7LmgeiGZZMmi6ElvTxCGbjYqQIJ4FlseBdDFXZpMRiw91LyZSgcoIg cpgHI+gXqb2EcEcOKsGD9FJpYnx10T+RmRxsS8qE8Nyxw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 07/26] gnu: wireshark: Update to 4.4.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978714517 (code B ref 74035); Sun, 03 Nov 2024 16:04:04 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:07 +0000 Received: from localhost ([127.0.0.1]:33070 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4F-0003m2-47 for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:07 -0500 Received: from 5.mo583.mail-out.ovh.net ([87.98.173.103]:52007) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4B-0003ky-CR for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:05 -0500 Received: from director6.ghost.mail-out.ovh.net (unknown [10.109.139.43]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBY3r6sz19y8 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:01 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-m26tl (unknown [10.110.101.220]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7EC1B1FD4D; Sun, 3 Nov 2024 16:02:59 +0000 (UTC) Received: from ngraves.fr ([37.59.142.105]) by ghost-submission-5b5ff79f4f-m26tl with ESMTPSA id yAAJGbOeJ2faWQEAonCgLA (envelope-from ); Sun, 03 Nov 2024 16:02:59 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-105G006dc87f7a3-b150-4382-bf8b-7918e9220512, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:02 +0100 Message-ID: <20241103160239.6772-7-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11436046830379197154 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfegvdefjeegteegteduueeigeevleetgeevteeffedttdffjefgleevgeekvefhnecuffhomhgrihhnpeifihhrvghshhgrrhhkrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=BxWABC56WEQalhboSLluX42yUZBsNLEsFLekeDs7yNI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649781; v=1; b=EgR7B6+ufaOztVS7Elz41QK3cTmwYHqmj/LfCfPg48SxiV32vrHnfEsc5OBefFHB+6bXH6L/ zolh894RAoQnbcuMqiHSv2dWslJnlpvZRZZPbslDm05N569UfRsjuToNNb8+t7ICzj4xKdaxmKy ZM+YtE6nd7L9tVnN/P0+EkOfxyCT/gkqe2h/+9vg/xUkMPMd6HrCLwClyaHhxyY7pSErlR/+E/3 nbi90uL8yMd5123H9sQt9B6AAQUHqYdwSGdM5qvRb+Y6DTjrEDpgcAVEub1iYRD2JKggG6Ij4HQ 1A2oiMiT/vMC9pTecnH0u9vD+Iotle1Fq+MfhGgE3LdPQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-9780. * gnu/packages/networking.scm (wireshark): Update to 4.4.1. --- gnu/packages/networking.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 17d4072ee0..be8b5c8e93 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -1805,14 +1805,14 @@ (define-public whois (define-public wireshark (package (name "wireshark") - (version "4.4.0") + (version "4.4.1") (source (origin (method url-fetch) (uri (string-append "https://www.wireshark.org/download/src/wireshark-" version ".tar.xz")) (sha256 - (base32 "0s8jqxcvq7ibfsq8v4scl8dq7y5hqgpivq4iw9y2x6jj136cvmga")))) + (base32 "1v2nflm8rdifc6pwlzn1ciz22wl15zwkqs3r7gjw60kh59brd7ib")))) (build-system qt-build-system) (arguments (list -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 08/26] gnu: pam-u2f: Update to 1.3.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978914536 (code B ref 74035); Sun, 03 Nov 2024 16:04:04 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:09 +0000 Received: from localhost ([127.0.0.1]:33076 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4G-0003mI-HS for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:08 -0500 Received: from 15.mo550.mail-out.ovh.net ([188.165.38.232]:41527) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4E-0003lx-Dz for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:06 -0500 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.140.207]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBd6gn9z1SwX for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:05 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pp7xz (unknown [10.110.188.17]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C319B1FDE8; Sun, 3 Nov 2024 16:03:05 +0000 (UTC) Received: from ngraves.fr ([37.59.142.97]) by ghost-submission-5b5ff79f4f-pp7xz with ESMTPSA id CL7qJ7meJ2d1YQsAcZBLcA (envelope-from ); Sun, 03 Nov 2024 16:03:05 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-97G0021dcbe89b-18b9-4392-8d3b-415d54156c63, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:03 +0100 Message-ID: <20241103160239.6772-8-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11437172729713058530 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepjefffeehjeekgfejledvkeehgfeufeevleevffetvdeftddvtddvjeejhfduffdunecuffhomhgrihhnpeihuhgsihgtohdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleejnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649786; v=1; b=WQit/HFxYxKHAJwv4FRPZ1oJhLs5U+272MPor6rfeDyjYjNN+YMv4G5IjgjYKd9X0MoOd0xM SGyDNsaxU0QOAG3Q5tbmp0D7b08eBbPwdfxUVCbi93+Sc50IKqNWNAIPC8TmaESygMjpVHJhudh JXm1AXSLSpO+akqbT/JalpKQaawIChnjyWa2xuD3OFPEOi7UTdeiOaVt72/Zta53EY6sYWi/BFd BT4sLriFBOY+zmXKrHMauUZ1qvJcUCu20JI2Nd0B2orV1rQG7ASWAe7dieHgFwAlJ6Bk9Hb2ORC 1HcrJ8zU1T4SY6rJt4gzKJp10Wl+vfzyyiH9AwTZBRtgg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. --- gnu/packages/security-token.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/security-token.scm b/gnu/packages/security-token.scm index 5abb461c0c..156a7d5e28 100644 --- a/gnu/packages/security-token.scm +++ b/gnu/packages/security-token.scm @@ -682,7 +682,7 @@ (define-public libu2f-server (define-public pam-u2f (package (name "pam-u2f") - (version "1.0.8") + (version "1.3.0") (source (origin (method git-fetch) (uri @@ -691,17 +691,16 @@ (define-public pam-u2f (commit (string-append "pam_u2f-" version)))) (file-name (git-file-name name version)) (sha256 - (base32 - "04d9davyi33gqbvga1rvh9fijp6f16mx2xmnn4n61rnhcn2jac98")))) + (base32 "1swvys98mw7ailllgqicvhj315qajhvqrmm314cp3bj0l76s9qpv")))) (build-system gnu-build-system) (arguments `(#:configure-flags (list (string-append "--with-pam-dir=" (assoc-ref %outputs "out") "/lib/security")))) (inputs - (list libu2f-host libu2f-server linux-pam)) + (list libfido2 linux-pam openssl)) (native-inputs - (list autoconf automake libtool asciidoc pkg-config)) + (list asciidoc autoconf automake libtool pkg-config)) (home-page "https://developers.yubico.com/pam-u2f/") (synopsis "PAM module for U2F authentication") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 10/26] gnu: xlsxio: Update to 0.2.35. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064978914542 (code B ref 74035); Sun, 03 Nov 2024 16:04:05 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:09 +0000 Received: from localhost ([127.0.0.1]:33078 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4H-0003mP-0I for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:09 -0500 Received: from 5.mo576.mail-out.ovh.net ([46.105.43.105]:46239) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4F-0003m5-LA for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:08 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.109.140.196]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBg1NNCz1mdd for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:07 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pp7xz (unknown [10.110.101.130]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id F29481FE61; Sun, 3 Nov 2024 16:03:06 +0000 (UTC) Received: from ngraves.fr ([37.59.142.95]) by ghost-submission-5b5ff79f4f-pp7xz with ESMTPSA id KNQiNLqeJ2d7YQsAcZBLcA (envelope-from ); Sun, 03 Nov 2024 16:03:06 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-95G00111afdbbe-5308-4150-b1b5-fbeff1ef14a6, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:05 +0100 Message-ID: <20241103160239.6772-10-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11437735681809179362 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelheenucevlhhushhtvghrufhiiigvpedunecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ltmM+klftrK1fgckbwRS7sp//sQEYmMV1fiUR0M1yf4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649787; v=1; b=nbVh7Bi1RGKX6bsEHZfQ8vGEttTh5I/Ssp5exH5OuWcqPzaDyaR4BH0dRv99Brrvzv7KEBOY dD1VAJQ2obaZlRt55IVaMCUqfUChMR7zqAaEDSzYp7IE3SICVhilSvm6w4UzrDmtEQfTBKRM2RK R1GECi7W7D0I5h0JoImylhvHc8VItZB0lXyzZk3EOJ/28kSgqiEXs414f+yPQGFvYa8ObCbM8eC Wt7bSTabWxBwfEtX4Zok2yRPw9sQuFjb7+TRMhY6CIOAbPcgQVPC+/tbEGYZGvv5kuiKjaazs/s JGaOo9PoTbDOJdRmAqHnscv6GOV8Fm+HOfW2Q+9hduLNw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-34795. * gnu/packages/xml.scm (xlsxio): Update to 0.2.35. --- gnu/packages/xml.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm index cfd53a291a..4a3936b66d 100644 --- a/gnu/packages/xml.scm +++ b/gnu/packages/xml.scm @@ -1545,7 +1545,7 @@ (define-public xerces-c (define-public xlsxio (package (name "xlsxio") - (version "0.2.33") + (version "0.2.35") (source (origin (method git-fetch) @@ -1554,7 +1554,7 @@ (define-public xlsxio (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "16i3yd168kb63za7jpycpb2by4831gz7wi90vzifdf85csc8c70s")))) + (base32 "140ap2l3qy27z1fhqpkq3a44aikhr3v5zlnm9m8vag42qiagiznx")))) (native-inputs (list expat gnu-make minizip which)) (build-system gnu-build-system) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 09/26] gnu: darkhttpd: Update to 1.16. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979214569 (code B ref 74035); Sun, 03 Nov 2024 16:04:05 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:12 +0000 Received: from localhost ([127.0.0.1]:33086 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4J-0003mk-CW for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:12 -0500 Received: from 3.mo583.mail-out.ovh.net ([46.105.40.108]:46551) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4F-0003ly-Ky for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:08 -0500 Received: from director1.ghost.mail-out.ovh.net (unknown [10.108.9.136]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBf3Rp1z1Qf0 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:06 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pp7xz (unknown [10.110.168.38]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4D72C1FE7C; Sun, 3 Nov 2024 16:03:06 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-pp7xz with ESMTPSA id gOjxDLqeJ2d5YQsAcZBLcA (envelope-from ); Sun, 03 Nov 2024 16:03:06 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R00479654876-cea8-4218-a698-2a86f5f2a2e8, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:04 +0100 Message-ID: <20241103160239.6772-9-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11437454205397426914 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=FZc4XoXdaV0IOVWK0MPsb5lA160fqgjySzYqk4ztRY8=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649786; v=1; b=ecad8J12eIRK0vcHgZg4ocgD6eM/MpdlBwoZre93oZkb75t8+MLOtIzRSec5Yy+6fiyHqmBH qXSvENpzyzLYWj++5GcepB0Wu/EuyngvYbzlOhVmDPtLGjhDMgnkskwfjwNM/BejhPB+sVC5e1U W+TgAy0WTj/BE4Vfaasf1QtpHeJFFqE9hZHF05UW4kMj66QQ2hK7j1ZdpimyujjzkNcoIFUbmyF T7mjh0iWtR7lqU8S3WcHMP7rzLZmdpYakHSvS6mrHDw1vrXXaIL4YAnlJSXgYErPw80qjgX0bWp d58iCqsmgEMmY3pei9gI8b0fnATLo0hLNwUgTLXgqXu/A== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2024-23770 and CVE-2024-23771. * gnu/packages/web.scm (darkhttpd): Update to 1.16. [arguments]: Improve style. --- gnu/packages/web.scm | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 34739bf088..eb27d3448c 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -6417,7 +6417,7 @@ (define-public surfraw (define-public darkhttpd (package (name "darkhttpd") - (version "1.13") + (version "1.16") (source (origin (method git-fetch) @@ -6426,20 +6426,18 @@ (define-public darkhttpd (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "0w11xq160q9yyffv4mw9ncp1n0dl50d9plmwxb0yijaaxls9i4sk")))) + (base32 "15mmq1v8p50mm9wx5w6g4rlr40b7d044lw7rs1wyzdiw9lcnihvm")))) (build-system gnu-build-system) (arguments - `(#:make-flags - (list (string-append "CC=" ,(cc-for-target))) - #:tests? #f ; No test suite - #:phases - (modify-phases %standard-phases - (delete 'configure) ; no configure script - (replace 'install - (lambda* (#:key outputs #:allow-other-keys) - (install-file "darkhttpd" - (string-append (assoc-ref outputs "out") - "/bin"))))))) + (list + #:make-flags #~(list (string-append "CC=" #$(cc-for-target))) + #:tests? #f ; No test suite + #:phases + #~(modify-phases %standard-phases + (delete 'configure) ; no configure script + (replace 'install + (lambda _ + (install-file "darkhttpd" (string-append #$output "/bin"))))))) (synopsis "Simple static web server") (description "darkhttpd is a simple static web server. It is standalone and does not need inetd or ucspi-tcp. It does not need any -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 11/26] gnu: pypy: Update to 7.3.17. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979314578 (code B ref 74035); Sun, 03 Nov 2024 16:04:06 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:13 +0000 Received: from localhost ([127.0.0.1]:33088 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4L-0003n3-5Z for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:13 -0500 Received: from 12.mo582.mail-out.ovh.net ([178.32.125.228]:32843) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4H-0003mH-3A for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:10 -0500 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.25.2]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBh0M7Kz1GPY for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-ffbbj (unknown [10.110.164.150]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C99231FD42; Sun, 3 Nov 2024 16:03:07 +0000 (UTC) Received: from ngraves.fr ([37.59.142.95]) by ghost-submission-5b5ff79f4f-ffbbj with ESMTPSA id /wEcJ7ueJ2d+pAEAS0J8rw (envelope-from ); Sun, 03 Nov 2024 16:03:07 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-95G001299317a3-c40b-419f-8d3c-971addc2b8de, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:06 +0100 Message-ID: <20241103160239.6772-11-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11438017157204861666 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgeefvdeutdevhffffeetieefveekfefhleeuueelvddvteduueelveegueejtdeknecuffhomhgrihhnpehphihthhhonhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=QrA3HvGHnmMBY6EU55/q7kI1otKY9AgoX6arHGD93a4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649788; v=1; b=MJWMnB1HwWYS7bFrXrS7O4FCvKnhhWB6i9t2MXGvEa8epAfoQGP6J/y80k/YktvawvXqG3v5 c0IlKxN2Y/macYXN+ITWM0UMF5YHOVsxuBJA3F2zouxF2MG2h8/Zcmlb+hFvbfKJpJvsEoWaWt0 VP+9JDA06JB3zcP5hvKoSqAjua/lMhmYniPUOL9rKCDn3+8K4SWjHdnzocTrOTYAR0vvK639k1G WVm3VtK2SoQZqR5d5ozb36fNeF6acpGFHY9x2e0LbDMO++pFtaeguyyxIQk+6Nkl0hAOuMXXIzW RnPxUr33/HKaQH6q0EusoOjVZUMT1nvLvzmXMqVqpcF/g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-37454. * gnu/packages/pypy.scm (pypy): Update to 7.3.17. --- gnu/packages/pypy.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/pypy.scm b/gnu/packages/pypy.scm index a39621b5ad..90986ac096 100644 --- a/gnu/packages/pypy.scm +++ b/gnu/packages/pypy.scm @@ -42,14 +42,14 @@ (define-module (gnu packages pypy) (define-public pypy (package (name "pypy") - (version "7.3.13") + (version "7.3.17") (source (origin (method url-fetch) (uri (string-append "https://downloads.python.org/pypy/" "pypy3.10-v" version "-src.tar.bz2")) (sha256 (base32 - "0v9s6pwrnaxqi5h1pvmaphj6kgyczx07ykl07hcx656h34y77haa")))) + "1xsbn9mbxi2kai4gg1nz6n6cbqsq60qh65f5l6ld7ip9g32lpmva")))) (build-system gnu-build-system) (arguments (list -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 12/26] gnu: indent: Remove uneeded arguments. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979414589 (code B ref 74035); Sun, 03 Nov 2024 16:04:06 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:14 +0000 Received: from localhost ([127.0.0.1]:33092 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4L-0003n5-IR for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:13 -0500 Received: from 20.mo561.mail-out.ovh.net ([178.33.47.94]:37593) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4I-0003mb-C7 for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:11 -0500 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.2.97]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBh5C66z1Mmk for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-v5jpl (unknown [10.110.188.135]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 795C51FDE8; Sun, 3 Nov 2024 16:03:08 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-v5jpl with ESMTPSA id v7bEFryeJ2e3FAAAiAqXCg (envelope-from ); Sun, 03 Nov 2024 16:03:08 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004f320f6f2-b945-41dd-a0c5-260e0b337b70, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:07 +0100 Message-ID: <20241103160239.6772-12-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11438017154206851810 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ruDX290lkL1OWSAZsMOoUYzCM8FTr8UvsiDdE0KqIYY=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649789; v=1; b=eXFgD5B3FiJlWBuM1LQOrvAZZKYydQZtGiEMgNVuezRNsmKiw2FVw+mPGzKYY2lFzNAsEpMn 25ZGJwiIW7FXXbxqjaajIwNh9ZqIpuXSwRdIVeirsGmTTKA0w18V0XLouBAX7+Stn5o2/LDdthR Lht1mMV3VIYCYbSUlZUzm+l+WakCPi0jkg/GJeV5ViW0cz7JlERgrZiNV2k3VN7bT06Ywtq2KpI J1pmN1IcwteENaBmXJy7X+q+iMwp1IgODkrzuSoWs8hU8J1MzBWWcESTzDPfA2/YjxgvHWoW20X Dcf1Ix80FLWtUT+cCEVM3nxixLw2eVY8vbkzrP/oJfm4g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/code.scm (indent) [arguments]: Remove field. [native-inputs]: Remove automake. --- gnu/packages/code.scm | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index 3f7a6de478..b1523f5ac7 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -881,33 +881,8 @@ (define-public indent (sha256 (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) (build-system gnu-build-system) - (arguments - `(#:phases - (modify-phases %standard-phases - (add-after 'unpack 'fix-docdir - (lambda _ - ;; Although indent uses a modern autoconf in which docdir - ;; defaults to PREFIX/share/doc, the doc/Makefile.am - ;; overrides this to be in PREFIX/doc. Fix this. - (substitute* "doc/Makefile.in" - (("^docdir = .*$") "docdir = @docdir@\n")) - #t)) - (add-after 'unpack 'fix-configure - (lambda* (#:key inputs native-inputs #:allow-other-keys) - ;; Replace outdated config.sub and config.guess: - (with-directory-excursion "config" - (for-each (lambda (file) - (install-file - (string-append (assoc-ref - (or native-inputs inputs) "automake") - "/share/automake-" - ,(version-major+minor - (package-version automake)) - "/" file) ".")) - '("config.sub" "config.guess"))) - #t))))) (native-inputs - (list texinfo automake)) ; For up to date 'config.guess' and 'config.sub'. + (list texinfo)) (synopsis "Code reformatter") (description "Indent is a program that makes source code easier to read by -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 13/26] gnu: indent: Add patch for CVE-2024-0911. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979414597 (code B ref 74035); Sun, 03 Nov 2024 16:04:07 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:14 +0000 Received: from localhost ([127.0.0.1]:33094 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4M-0003nL-08 for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:14 -0500 Received: from 7.mo575.mail-out.ovh.net ([46.105.63.230]:33305) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4J-0003mc-0k for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:12 -0500 Received: from director9.ghost.mail-out.ovh.net (unknown [10.108.2.97]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBj3vtLz1hQH for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:09 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-d5jwb (unknown [10.110.118.54]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4B73E1FD23; Sun, 3 Nov 2024 16:03:09 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-d5jwb with ESMTPSA id UAnzCb2eJ2cd+BQARGbqoQ (envelope-from ); Sun, 03 Nov 2024 16:03:09 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R00256ea56fa-e574-4be0-a18d-ce7499ceb21a, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:08 +0100 Message-ID: <20241103160239.6772-13-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11438298631606624994 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedugeelfeekhedugedvieffleekgeffiefhkeejudelveeuuefhheevtefghedtheenucffohhmrghinhepghhnuhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeehpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=qokG5rhXg2YEjFl4T6g7rXk97NefvHx3XjwhpK4wlZU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649789; v=1; b=S8TkABDG+8v2r7FcggHRSMwiVsFHpp7VwANXh1bXfZdH9Ily5wHO85/XqOuFTPePYAfchlSm 9rE97MnWv7MV/xFGaOVyFQGkxqy8NrsWG6kGIbLMq8sFe60mhC9c8Ptih4bQvE/5GE6c9rtfVHq GMQz1TBki8WAVL49wLDi7MOj+whtmRWRSJbve9g24/Q6iwSf/6qvkBO/Fx9cEqClOfVtGB17/a6 H5v1CNOXSBatiNGpQ4d7XWq8mBcfDc+8nXQZHUO2Lt1I/L1F6zmBk3/7h0Bq248mBXaNGnNSov2 zYJ9yZYVAWy3SYhEgkClopHw03C5D/0qPxoy/7ZMpExmw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/patches/indent-CVE-2024-0911.patch: Add patch here... * gnu/local.mk: ...here... * gnu/packages/code.scm (indent)[source]: ...and here. --- gnu/local.mk | 1 + gnu/packages/code.scm | 4 +- .../patches/indent-CVE-2024-0911.patch | 61 +++++++++++++++++++ 3 files changed, 65 insertions(+), 1 deletion(-) create mode 100644 gnu/packages/patches/indent-CVE-2024-0911.patch diff --git a/gnu/local.mk b/gnu/local.mk index 3b94e6cc7e..06e8f1363c 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1562,6 +1562,7 @@ dist_patch_DATA = \ %D%/packages/patches/idris-test-ffi008.patch \ %D%/packages/patches/igraph-fix-varargs-integer-size.patch \ %D%/packages/patches/ilmbase-fix-tests.patch \ + %D%/packages/patches/indent-CVE-2024-0911.patch \ %D%/packages/patches/instead-use-games-path.patch \ %D%/packages/patches/intltool-perl-compatibility.patch \ %D%/packages/patches/irrlicht-use-system-libs.patch \ diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index b1523f5ac7..04ca4dfd6b 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -879,7 +879,9 @@ (define-public indent (uri (string-append "mirror://gnu/indent/indent-" version ".tar.gz")) (sha256 - (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) + (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")) + ;; Remove patch when updating. + (patches (search-patches "indent-CVE-2024-0911.patch")))) (build-system gnu-build-system) (native-inputs (list texinfo)) diff --git a/gnu/packages/patches/indent-CVE-2024-0911.patch b/gnu/packages/patches/indent-CVE-2024-0911.patch new file mode 100644 index 0000000000..4687d3f59a --- /dev/null +++ b/gnu/packages/patches/indent-CVE-2024-0911.patch @@ -0,0 +1,61 @@ +Upstream issue: https://lists.gnu.org/archive/html/bug-indent/2024-01/msg00001.html +Signed-off-by: Petr Písař +--- + regression/TEST | 2 +- + regression/input/comment-parent-heap-underread.c | 3 +++ + regression/standard/comment-parent-heap-underread.c | 5 +++++ + src/output.c | 2 +- + 4 files changed, 10 insertions(+), 2 deletions(-) + create mode 100644 regression/input/comment-parent-heap-underread.c + create mode 100644 regression/standard/comment-parent-heap-underread.c + +diff --git a/regression/TEST b/regression/TEST +index 7c07c2e..951b1a2 100755 +--- a/regression/TEST ++++ b/regression/TEST +@@ -40,6 +40,7 @@ BUGS="case-label.c one-line-1.c one-line-2.c one-line-3.c \ + macro.c enum.c elif.c nested.c wrapped-string.c minus_predecrement.c \ + bug-gnu-33364.c float-constant-suffix.c block-comments.c \ +- no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c" ++ no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c \ ++ comment-parent-heap-underread.c" + + INDENTSRC="args.c backup.h backup.c dirent_def.h globs.c indent.h \ + indent.c indent_globs.h io.c lexi.c memcpy.c parse.c pr_comment.c \ +diff --git a/regression/input/comment-parent-heap-underread.c +b/regression/input/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..68e13cf +--- /dev/null ++++ b/regression/input/comment-parent-heap-underread.c +@@ -0,0 +1,3 @@ ++void foo(void) { ++/*a*/(1); ++} +diff --git a/regression/standard/comment-parent-heap-underread.c +b/regression/standard/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..9a1c6e3 +--- /dev/null ++++ b/regression/standard/comment-parent-heap-underread.c +@@ -0,0 +1,5 @@ ++void ++foo (void) ++{ ++/*a*/ (1); ++} +diff --git a/src/output.c b/src/output.c +index ee01bcc..17eee6e 100644 +--- a/src/output.c ++++ b/src/output.c +@@ -290,7 +290,7 @@ void set_buf_break ( + /* Did we just parse a bracket that will be put on the next line + * by this line break? */ + +- if ((*token == '(') || (*token == '[')) ++ if (level > 0 && ((*token == '(') || (*token == '['))) + { + --level; /* then don't take it into account */ + } +-- +2.43.0 -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 14/26] gnu: squashfs-tools: Update to 4.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979614610 (code B ref 74035); Sun, 03 Nov 2024 16:04:07 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:16 +0000 Received: from localhost ([127.0.0.1]:33098 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4N-0003nV-KG for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:16 -0500 Received: from 7.mo575.mail-out.ovh.net ([46.105.63.230]:52609) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4L-0003n2-2s for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:13 -0500 Received: from director9.ghost.mail-out.ovh.net (unknown [10.109.148.200]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBm48Q7z1jKk for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:12 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-f67xt (unknown [10.110.118.5]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 529871FD23; Sun, 3 Nov 2024 16:03:12 +0000 (UTC) Received: from ngraves.fr ([37.59.142.95]) by ghost-submission-5b5ff79f4f-f67xt with ESMTPSA id WjYtDcCeJ2f+6BQAvrCjuw (envelope-from ); Sun, 03 Nov 2024 16:03:12 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-95G00122a23554-e71f-4833-8b14-ea928a5cc768, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:09 +0100 Message-ID: <20241103160239.6772-14-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11439143055650120418 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleehnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeehpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=KblVVGy6Rl6R101s9RPJHByOdqsmJXlg2W+viX35SgQ=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649792; v=1; b=nhx18z076P6abrEEEAr6LWKsrJWfrXbz8uCWL/iMonxhIKzGb143zOqBToB9BhXVnSYUXIvh 5JKs2JscXrxFP2d7XWMmN8p1TctvYEMC0MdsmmlkaADs5oSvQ47LWFaZiPsBxG9YRKN3AFstufY Dge82XW5HUTLhJI0cTZTk7eMeT2reJ/MH+q206B6cKeg77RWpcKp2GExUuj9T+5ArtnZ9C3ErXq U9wCF/SV2rVbf0JQMItTtynU5PPM4vtqr7kQf66a9jCwaLfqwU2nDdv3h0sxszesDrDh5IsJQvl FK6s2CrjnwdKQyuAy28Dgmv0ERu/9uN6nmOEjFnUI7cAQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-40153 and CVE-2021-41072. * gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1. [arguments]: Improve style. <#:make-flags>: Add INSTALL_MANPAGES_DIR value. <#:phases>: Remove phase 'install-documentation. Add phase 'patch-generated-source-shebangs. [native-inputs]: Add coreutils-minimal, help2man, which. [inputs]: Rewrite. --- gnu/packages/compression.scm | 52 ++++++++++++++++++------------------ 1 file changed, 26 insertions(+), 26 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index 97696ff0ef..7627717db6 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -1023,7 +1023,7 @@ (define-public lz4 (define-public squashfs-tools (package (name "squashfs-tools") - (version "4.5") + (version "4.6.1") (source (origin (method git-fetch) @@ -1032,34 +1032,34 @@ (define-public squashfs-tools (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "18d4nwa22vgb8j2badngjngw63f0lj501cvlh3920wqy2mqxwav6")))) + (base32 "14nisidxx2d2qivyv7xfcg59qkj4fjiniir7nvymazdsng63gcr1")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; no check target - #:make-flags - (list (string-append "CC=" ,(cc-for-target)) - "XZ_SUPPORT=1" - "LZO_SUPPORT=1" - "LZ4_SUPPORT=1" - "ZSTD_SUPPORT=1" - (string-append "INSTALL_DIR=" (assoc-ref %outputs "out") "/bin")) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda _ - (chdir "squashfs-tools"))) - (add-after 'install 'install-documentation - ;; Install what very little usage documentation is provided. - (lambda* (#:key outputs #:allow-other-keys) - (let* ((out (assoc-ref outputs "out")) - (doc (string-append out "/share/doc/" ,name))) - (install-file "../USAGE" doc))))))) + (list + #:tests? #f ; no check target + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + "XZ_SUPPORT=1" + "LZO_SUPPORT=1" + "LZ4_SUPPORT=1" + "ZSTD_SUPPORT=1" + (string-append "INSTALL_DIR=" #$output "/bin") + (string-append "INSTALL_MANPAGES_DIR=" #$output "/share/man/man1")) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda _ + (chdir "squashfs-tools"))) + (add-after 'patch-source-shebangs 'patch-generated-source-shebangs + (lambda _ + (substitute* (find-files "generate-manpages" "\\.sh") + (("print \"#!/bin/sh") + (string-append "print \"#!" (which "sh"))))))))) + (native-inputs + (list coreutils-minimal help2man which)) (inputs - `(("lz4" ,lz4) - ("lzo" ,lzo) - ("xz" ,xz) - ("zlib" ,zlib) - ("zstd:lib" ,zstd "lib"))) + (list lz4 lzo xz zlib `(,zstd "lib"))) (home-page "https://github.com/plougher/squashfs-tools") (synopsis "Tools to create and extract squashfs file systems") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 15/26] gnu: shapelib: Update to 1.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064979914631 (code B ref 74035); Sun, 03 Nov 2024 16:04:08 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:19 +0000 Received: from localhost ([127.0.0.1]:33104 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4R-0003nu-6y for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:19 -0500 Received: from 15.mo581.mail-out.ovh.net ([87.98.180.21]:42673) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4N-0003nN-6u for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:16 -0500 Received: from director5.ghost.mail-out.ovh.net (unknown [10.108.9.101]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBp1Nl3z170v for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:14 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-4p526 (unknown [10.111.182.238]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id D50E71FD1C; Sun, 3 Nov 2024 16:03:13 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-4p526 with ESMTPSA id O9VGH8GeJ2fo5SIASrjgQA (envelope-from ); Sun, 03 Nov 2024 16:03:13 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002d9277ae6-5e1c-4d94-bdc0-714425520db1, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:10 +0100 Message-ID: <20241103160239.6772-15-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11439706003526116066 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedunecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Z8DpA6Rm7qAaGkYqXvwOtUhxVCkkBu7c7a40oKHmYso=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649794; v=1; b=zph0WIR8s4iyBs4GX+OKN3m698tVaVcksqdiTU6dl4TTA5zQa8Rtl58mkue0MJpKl89ZS6XJ m8GJKg1RR8Oie5ASlzy4nqadhSLZVeE1UU+pVa4QRhCK70eY7zn7tYKILgCPLTfQJuf41F6JPmL 9keYmIff6RHSQVXpY8P0w0KrZaJZLh7GjPSfwVQ/IcCcFApztBd/46WN+qRZm5zO1OjpnqrKXGq JlKNY82tDFp7wLUyX/YeAioUYccAkFtL/oIapFUx/KApFIxVpENObuXFpFK2VprdkRnjAHDz+FO 5TWvxbKs47opT24Q6SApTvD00mVZ6OyIu6tCAircLE5Eg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-0699. * gnu/packages/geo.scm (shapelib): Update to 1.6.1. --- gnu/packages/geo.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/geo.scm b/gnu/packages/geo.scm index 5d120b3c98..affa50c515 100644 --- a/gnu/packages/geo.scm +++ b/gnu/packages/geo.scm @@ -2574,7 +2574,7 @@ (define-public readosm (define-public shapelib (package (name "shapelib") - (version "1.5.0") + (version "1.6.1") (source (origin (method git-fetch) @@ -2583,7 +2583,7 @@ (define-public shapelib (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1lzch0jf6yqhw391phhafzw4ghmiz98zkf698h4fmq109fa2vhqd")))) + (base32 "0l67gp1618lcw7fg2iclbh016cqyw85s3cmd3qzx6aw0jq19hj8n")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) @@ -2591,8 +2591,8 @@ (define-public shapelib (synopsis "Provides C library to write and update ESRI Shapefiles") (description "The Shapefile C Library provides the ability to write simple C programs -for reading, writing and updating (to a limited extent) ESRI Shapefiles, and the -associated attribute file (@file{.dbf}).") +for reading, writing and updating (to a limited extent) ESRI Shapefiles, and +the associated attribute file (@file{.dbf}).") (license license:gpl2+))) (define-public spatialite-tools -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 16/26] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980014639 (code B ref 74035); Sun, 03 Nov 2024 16:04:08 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:20 +0000 Received: from localhost ([127.0.0.1]:33106 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4R-0003ny-Jt for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:20 -0500 Received: from 3.mo576.mail-out.ovh.net ([188.165.52.203]:50095) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4O-0003nU-AG for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:17 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.148.7]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBq21lgz1pS8 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:15 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-4p526 (unknown [10.111.174.145]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id DD6D01FD24; Sun, 3 Nov 2024 16:03:14 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-4p526 with ESMTPSA id 5PAAHsKeJ2fs5SIASrjgQA (envelope-from ); Sun, 03 Nov 2024 16:03:14 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R00285170a35-eb65-4f6d-aec1-9b5cf69e96d0, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:11 +0100 Message-ID: <20241103160239.6772-16-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11439987480586412770 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhephffguedvffekiefffeeujefgfedvhfetueetvefggedvtdduudffheehvdeukeffnecuffhomhgrihhnpehgnhhomhgvrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=bSaIBpWQCB3x3SQJmGEZcywIFS86c1AvX4jCZT4rU7k=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649795; v=1; b=pXTOM1oA5gJNJV53+gycbV9r/40ni2RmRrxi17EKKK6rd5gkaqjMiy9aB2YJ22Vb5cFfnXY7 vzKDeyf+OenGxcikCUWY53TCeAZFGvtQK2UeQh3IY8YxtqBR8A6WN9FELtbyjCv1Vrk3cWdAplX JE6gWeNMl/LRK9s1n456F0sYyDPaTeUzW2xKgq1jEVwQPQY/z2mBc741VIrlO8ODS2zJOBI8qCd mjXPkajwAn6v4jM0ilcq3gDk4QBYXSFh/pUeCIGOts/8L3Kn7edAFrc4l7Tg4roznj64Bzo2Syj /hOTRlQ5I7/pNqWAk2Eqpvw6lsMe+szXuGXwAWulOP48A== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-39360. * gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba. --- gnu/packages/gnome.scm | 45 ++++++++++++++++++++++-------------------- 1 file changed, 24 insertions(+), 21 deletions(-) diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm index 77a0633b50..82ea9d6699 100644 --- a/gnu/packages/gnome.scm +++ b/gnu/packages/gnome.scm @@ -10591,28 +10591,31 @@ (define-public gsound (license license:lgpl2.1+))) (define-public libzapojit - (package - (name "libzapojit") - (version "0.0.3") - (source (origin - (method url-fetch) - (uri (string-append "mirror://gnome/sources/" name "/" - (version-major+minor version) "/" - name "-" version ".tar.xz")) - (sha256 - (base32 - "0zn3s7ryjc3k1abj4k55dr2na844l451nrg9s6cvnnhh569zj99x")))) - (build-system gnu-build-system) - (native-inputs - (list gobject-introspection intltool pkg-config)) - (inputs - (list gnome-online-accounts json-glib rest)) - (home-page "https://wiki.gnome.org/Projects/Zapojit") - (synopsis "Library for accessing SkyDrive and Hotmail") - (description - "Libzapojit is a GLib-based library for accessing online service APIs of + (let ((revision "1") + (commit "99d49bac5edc4afdcac742a0a142908e405597b0")) + (package + (name "libzapojit") + (version (git-version "0.0.3" revision commit)) + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://gitlab.gnome.org/Archive/libzapojit") + (commit commit))) + (file-name (git-file-name name version)) + (sha256 + (base32 "12frqg925rmic3rf37h5vs48xdy3mfi4ip24v0bl73h5sxy8n828")))) + (build-system gnu-build-system) + (native-inputs + (list gobject-introspection intltool pkg-config)) + (inputs + (list gnome-online-accounts json-glib rest)) + (home-page "https://wiki.gnome.org/Projects/Zapojit") + (synopsis "Library for accessing SkyDrive and Hotmail") + (description + "Libzapojit is a GLib-based library for accessing online service APIs of Microsoft SkyDrive and Hotmail, using their REST protocols.") - (license license:lgpl2.1+))) + (license license:lgpl2.1+)))) (define-public gnome-clocks (package -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 17/26] gnu: gifsicle: Update to 1.95. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:09 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980014645 (code B ref 74035); Sun, 03 Nov 2024 16:04:09 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:20 +0000 Received: from localhost ([127.0.0.1]:33108 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4S-0003o4-3N for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:20 -0500 Received: from 3.mo576.mail-out.ovh.net ([188.165.52.203]:35119) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4P-0003nh-0S for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:17 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.148.7]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBr3NKYz1pbd for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:16 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-9jsgd (unknown [10.108.42.63]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id EBD581FD84; Sun, 3 Nov 2024 16:03:15 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-9jsgd with ESMTPSA id w/MIJ8OeJ2ck2AAA7LXE2w (envelope-from ); Sun, 03 Nov 2024 16:03:15 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002f831b662-1000-4cdc-9a80-620306a914b2, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:12 +0100 Message-ID: <20241103160239.6772-17-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11440268956028953314 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfelhedvtdeffefhhfdttdelffeikeejheefvdduvdekueejgeeffedutdekffevnecuffhomhgrihhnpehltggufhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeeipdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649796; v=1; b=s2LmdzIrrMLE1j27aijmgQDL9cWGpWEi7OEGqWNWHz1njsTsSufs7CniSkP+byxMIYhpBZL6 4dU550mqZPyvK1pBqkCZg3bjEDg81nofw541aDZ6bJdy7diegZcf00Fy1JoBIWUGktfa3OFGjFX Eowlg6dyBDKhLCbTVSfYEIXzWK9xEXkY9CYYMXEiV6Ym805J4+cMTSFuctRDgmb9t0YP4qlMnIH 6J+I0kL4ce0yfx51YacVbX0KNReTXhKiog+Xq/sUCetMEcm+WZ5aK715hbz53eUY3OtOooWmFJE fjymP8KWIlvGXcJVt8ZfElDZ56Q5UK1RwJskXtPbatKjg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-44821 and CVE-2023-46009. * gnu/packages/image.scm (gifsicle): Update to 1.95. --- gnu/packages/image.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index 7f17c71aef..0d6593dc21 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -2172,14 +2172,14 @@ (define-public swappy (define-public gifsicle (package (name "gifsicle") - (version "1.94") + (version "1.95") (source (origin (method url-fetch) (uri (string-append "https://www.lcdf.org/gifsicle/gifsicle-" version ".tar.gz")) (sha256 - (base32 "16zq5wd6fyjgy0p0mak15k3mh1zpqb9rg6gqfpg215kqq02p1jab")))) + (base32 "0l69gn562l7a1l10zz1bfs756ipd682idgpk60qs3llz013icwdj")))) (build-system gnu-build-system) (arguments '(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 18/26] gnu: sendmail: Update to 8.18.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:09 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980314666 (code B ref 74035); Sun, 03 Nov 2024 16:04:09 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:23 +0000 Received: from localhost ([127.0.0.1]:33114 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4U-0003oT-Th for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:23 -0500 Received: from 19.mo583.mail-out.ovh.net ([46.105.35.78]:48547) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4S-0003o2-Nc for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:21 -0500 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBv4nV0z1QgP for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:19 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-ffbbj (unknown [10.110.188.208]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7BB851FD6A; Sun, 3 Nov 2024 16:03:19 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-ffbbj with ESMTPSA id FMK4DceeJ2e6pAEAS0J8rw (envelope-from ); Sun, 03 Nov 2024 16:03:19 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G0057954bbc7-c72e-433e-8b65-55aba49b06f0, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:13 +0100 Message-ID: <20241103160239.6772-18-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11441113381352825570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfduhedvgeeiieeifeelkeduhedtheetudelfeevvdeihfekfeekieeiffehveevnecuffhomhgrihhnpehsvghnughmrghilhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekfedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=pafjSbyWBfLgi+3s2nYnsAzEBTRAYd+jNDlHyBEe9aI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649799; v=1; b=NdWj6aavQXQR8GpyiyniMBhx+hXPvCTMqJs42pRJ9X09TPONiIDI3O2fQBK001y2KvfxUpwc z25+aRwvbXtXupGhFQd0IwwpO0qWnJLskfyZFl6tSVSAvqDBI/dwjednBBid3zbCuy4i654Ld2F rfb7LTTNYW5B+zMfxVEZlsXb9O+i1xoV/ExR06IhFgKHDv/WT3ZgU03a3+iDHSDwHK4Ad7VJrZa mXeXTeUL4P8s7uB1JPsuv8FVbfOZptzZd+7/t0Zn5/g7YmKhLeEJxRW14mEtEXwWdPrxOxclLO0 SkXI45cg2t5zlStx3LOa34tF2bA3uy74QmFow9gtjmqUA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. --- gnu/packages/mail.scm | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 2c69a7b818..ca1a55818e 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -3122,7 +3122,7 @@ (define-public mhonarc (define-public sendmail (package (name "sendmail") - (version "8.15.2") + (version "8.18.1") (source (origin (method url-fetch) @@ -3130,8 +3130,7 @@ (define-public sendmail "ftp://ftp.sendmail.org/pub/sendmail/sendmail." version ".tar.gz")) (sha256 - (base32 - "0fdl9ndmspqspdlmghzxlaqk56j3yajk52d7jxcg21b7sxglpy94")))) + (base32 "0w07iw4imp9wvczd2mijns7zxl8p1wk29b9yrzvhcj4fqc4z7wfb")))) (build-system gnu-build-system) (arguments `(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 19/26] gnu: openvpn: Update to 2.6.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980514689 (code B ref 74035); Sun, 03 Nov 2024 16:04:10 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:25 +0000 Received: from localhost ([127.0.0.1]:33123 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4W-0003oh-Cq for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:25 -0500 Received: from 4.mo576.mail-out.ovh.net ([46.105.42.102]:34227) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4T-0003oG-Ra for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:22 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBw5PnJz1pR3 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:20 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zc272 (unknown [10.108.54.55]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 6FAE11FE61; Sun, 3 Nov 2024 16:03:20 +0000 (UTC) Received: from ngraves.fr ([37.59.142.97]) by ghost-submission-5b5ff79f4f-zc272 with ESMTPSA id gd8iC8ieJ2dtFAAAfvxZcA (envelope-from ); Sun, 03 Nov 2024 16:03:20 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-97G00276535b10-529a-46ec-93b4-055c9f2a8611, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:14 +0100 Message-ID: <20241103160239.6772-19-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11441394854523495138 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdeljeenucevlhhushhtvghrufhiiigvpedvnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=0LEHvRvyTCXad2YSHo4l/HLEPV68T9gyWkeXTnK7aUg=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649800; v=1; b=eoOW7crccs3VGAH2Q/s/frZf15FYsgI+Kq4Bp3Ewy8OUREkoZxg+H1RGCtwjMjbsb/dZ8XjE oHygXcMxZ7G97tx3Jch+iHv2HUZzazqZIZQQEWSO4E7m+kp7rgkGLlDsGXOOWUmFk+4tZrk3Pcw 9REiWxmdrgrL3XAOG2/STpCLDomQS0nE7JYPDrGBJZbTY0YdgksYvhv4MVNlIWCns2GWd5Sv8jQ fpLDwPbF/d+Fio6/PsKhrvUikzTAzjx0nibKTeXhvch4a+V1HcTix4iCHVD78HwEd5FYIVylks0 Bd0fhkJMtjTd7TUcjBw3XmECPPG3ru/R+7QpzF4E0JrUA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thix fixes CVE-2024-24974, CVE-2024-27459 and CVE-2024-27903. * gnu/packages/vpn.scm (openvpn): Update to 2.6.12. --- gnu/packages/vpn.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/vpn.scm b/gnu/packages/vpn.scm index 9f36595bfd..193b247779 100644 --- a/gnu/packages/vpn.scm +++ b/gnu/packages/vpn.scm @@ -867,7 +867,7 @@ (define-public openfortivpn (define-public openvpn (package (name "openvpn") - (version "2.6.7") + (version "2.6.12") (source (origin (method url-fetch) (uri (string-append @@ -875,7 +875,7 @@ (define-public openvpn version ".tar.gz")) (sha256 (base32 - "04wr0g97nmv81javym8r99mglmb86v1i49xmnmzf938x1cs7g67f")))) + "0a8r3bvg4aic9b7dix0h7990g3j1gq17wd3w6vqk8vk8xgfhyq8w")))) (build-system gnu-build-system) (arguments '(#:configure-flags '("--enable-iproute2=yes"))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 20/26] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980614698 (code B ref 74035); Sun, 03 Nov 2024 16:04:10 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:26 +0000 Received: from localhost ([127.0.0.1]:33125 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4Y-0003oz-4o for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:26 -0500 Received: from 2.mo560.mail-out.ovh.net ([188.165.53.149]:39041) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4U-0003oM-Ov for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:23 -0500 Received: from director2.ghost.mail-out.ovh.net (unknown [10.108.2.115]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBx4ztQz1ZRV for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:21 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-2wdkm (unknown [10.110.96.185]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 63C541FDF4; Sun, 3 Nov 2024 16:03:21 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-2wdkm with ESMTPSA id XtqdDsmeJ2c+9gUAjkCyYw (envelope-from ); Sun, 03 Nov 2024 16:03:21 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G0053659c851-d2f6-4aa6-a5f4-3b1d3cf40a43, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:15 +0100 Message-ID: <20241103160239.6772-20-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11441676332338701026 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvleelgeeffeetleekueegvdfhtedvueffiefhkedtleejkeduveelgfdufeduleenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=HJTQtCycCpSf9vJMXGVPbShzezeUn1n31dE0uCrODeI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649801; v=1; b=aVYKgPSAIVZkjGK+JPZ4xQwNakoP/VzyMA7J9EkowTrM97uj3AP1iiLf/ftrFgg3m+81GJ8G Nx8quQL6Y6pdtEM6GSSG+5M4ouvWUIuFVqB3B0G94dA3OGZrsRaINlAIgFPDoQFFzJMlnzoJzSP TI/Efd5VikTCmO3zDY9Jp/w465ZHMkpEEavTvSy/nTv27wNXQZiZO7NjtJ6DcYOPT0ZujqGf9zI Jzh8ESmO+jrDydrjXaRGnD9vh7ZvIC+TlzNj1YFLoRb4M+4AmD+IVPqFvT/0nod53dRUNexY8eL xx6yFY+hnwL5HJl2dz1DMkSSeiWSbE85SiYUQo9JFOKEg== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2022-26981. * gnu/packages/language.scm (liblouis): Update to 3.31.0. [arguments]: Improve style using gexps. [native-inputs]: Rewrite and replace python-wrapper by python. --- gnu/packages/language.scm | 47 ++++++++++++++++++--------------------- 1 file changed, 22 insertions(+), 25 deletions(-) diff --git a/gnu/packages/language.scm b/gnu/packages/language.scm index 78fcba4287..6a5e7927b4 100644 --- a/gnu/packages/language.scm +++ b/gnu/packages/language.scm @@ -10,6 +10,7 @@ ;;; Copyright © 2023 gemmaro ;;; Copyright © 2024 Efraim Flashner ;;; Copyright © 2024 Charles +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -338,7 +339,7 @@ (define-public libchewing (define-public liblouis (package (name "liblouis") - (version "3.15.0") + (version "3.31.0") (source (origin (method git-fetch) @@ -348,34 +349,30 @@ (define-public liblouis (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1ljy5xsy7vf2r0ix0d7bqcr6qvr6897f8madsx9zlm1mrj31n5px")))) + (base32 "02bga2l4jiyrgfqdl27wszz5yd6h80n2dmq3p6nb2br83jywisfh")))) (build-system gnu-build-system) (outputs '("out" "bin" "doc" "python")) (arguments - `(#:configure-flags - (list - "--disable-static" - "--enable-ucs4") - #:phases - (modify-phases %standard-phases - (add-after 'install 'install-python-extension - (lambda* (#:key outputs #:allow-other-keys) - (with-directory-excursion "python" - (invoke "python" "setup.py" "install" - (string-append "--prefix=" - (assoc-ref outputs "python")) - "--root=/"))))))) + (list + #:configure-flags #~(list "--disable-static" "--enable-ucs4") + #:phases + #~(modify-phases %standard-phases + (add-after 'install 'install-python-extension + (lambda _ + (with-directory-excursion "python" + (invoke "python3" "setup.py" "install" "--root=/" + (string-append "--prefix=" #$output:python)))))))) (native-inputs - `(("autoconf" ,autoconf) - ("automake" ,automake) - ("clang-format" ,clang) - ("help2man" ,help2man) - ("libtool" ,libtool) - ("libyaml" ,libyaml) - ("makeinfo" ,texinfo) - ("perl" ,perl) - ("pkg-config" ,pkg-config) - ("python" ,python-wrapper))) + (list autoconf + automake + clang + help2man + libtool + libyaml + texinfo + perl + pkg-config + python)) (synopsis "Braille translator and back-translator") (description "Liblouis is a braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 22/26] gnu: unicorn: Update to 2.1.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:11 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980714706 (code B ref 74035); Sun, 03 Nov 2024 16:04:11 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:27 +0000 Received: from localhost ([127.0.0.1]:33127 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4Y-0003p1-M5 for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:27 -0500 Received: from 5.mo576.mail-out.ovh.net ([46.105.43.105]:40169) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4V-0003oW-LF for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:24 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBz17hHz1pbd for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:23 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-djbfb (unknown [10.110.168.127]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 03A2D1FE8A; Sun, 3 Nov 2024 16:03:22 +0000 (UTC) Received: from ngraves.fr ([37.59.142.105]) by ghost-submission-5b5ff79f4f-djbfb with ESMTPSA id /aLhNcqeJ2cRSgAAaCtQxg (envelope-from ); Sun, 03 Nov 2024 16:03:22 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-105G006c0025922-73ff-41c9-8b16-393427f5133a, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:17 +0100 Message-ID: <20241103160239.6772-22-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11442239279212782306 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnheptddtjeefffegiedthfevuedujedtffffueeffeekvdduheelleettddvffeigfelnecuffhomhgrihhnpehunhhitghorhhnqdgvnhhgihhnvgdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=MuQFZQbEBKTGfqy1DzhCyVd+c8xzDEBmFMZXC+f8L3o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649803; v=1; b=uuecbzkm6jtv+97aMxi2lEbcIkylbLKiitR2wMarMZ8jdNEkBCFeOAXHDChJGDLTGqRdATrX yY/ZbzXeYkPc/SJhgzpKve2kG9E+Lf6zVWnkKlVMcm/mvS1WC60xGZGm6d1G8hKisp4zdREUtc5 Ne886HdJo3QT02D9VDm0UVs0YJhkgrVjbpgg3vo9HxMo6MNT5bz7SC/pnOkUbGWRVhBkwCMxpen dMSvxQI/rIFAr2aXQYvOHcxdmaBHMxrDkzCIobPFWH2xWn0kQIeOT+MuUQDLcZHWhWl/Dhks0Fe 9vNtGGYcWTiR6Q9yJIaXuj3KLqo7Vo8zMiGLIr3QCsCdg== X-Spam-Score: 0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) Thix fixes CVE-2021-4296. * gnu/packages/emulators.scm (unicorn): Update to 2.1.1. --- gnu/packages/emulators.scm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/gnu/packages/emulators.scm b/gnu/packages/emulators.scm index f0a60c0b49..948e588c4c 100644 --- a/gnu/packages/emulators.scm +++ b/gnu/packages/emulators.scm @@ -3508,13 +3508,18 @@ (define-public zsnes (define-public unicorn (package (name "unicorn") - (version "2.0.1.post1") + (version "2.1.1") (source (origin (method url-fetch) (uri (pypi-uri name version)) (sha256 - (base32 "0mlfs8qfi0clyncfkbxp6in0cpl747510i6bqymwid43xcirbikz")))) + (base32 "18sbrycr62wcs3a68a9q76ihpahfsd4bn3mryvyhimwwn1342kwh")) + (modules '((guix build utils))) + ;; cmake files are not in the cmake dir in pypi + (snippet #~(substitute* "src/CMakeLists.txt" + (("include\\(cmake/") + "include("))))) (build-system pyproject-build-system) (native-inputs (list cmake pkg-config)) (home-page "https://www.unicorn-engine.org") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 21/26] gnu: youtube-dl: Deprecate package. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:11 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064980714714 (code B ref 74035); Sun, 03 Nov 2024 16:04:11 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:27 +0000 Received: from localhost ([127.0.0.1]:33131 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4Z-0003p9-4h for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:27 -0500 Received: from 6.mo560.mail-out.ovh.net ([87.98.165.38]:47521) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4V-0003oS-Lk for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:24 -0500 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.176.128]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XhKBy3pdJz1Z24 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:22 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-8l527 (unknown [10.111.174.252]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4A0081FDF2; Sun, 3 Nov 2024 16:03:22 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-8l527 with ESMTPSA id xMNiAMqeJ2eUSgAAMeK9BA (envelope-from ); Sun, 03 Nov 2024 16:03:22 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G0047889b073-68b9-4ea7-99db-96f97c4e8483, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:16 +0100 Message-ID: <20241103160239.6772-21-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11441957806110597858 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=He0mlwKWr5nnOb0EspcF1EB9CaxEO9fmT1uGdz3tGmo=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649802; v=1; b=TUsQrYqBb7uGHDLgP1cI6tdxccdigVf0BFfI5jv2erTYLI1QQRY+wjTJF9bOgVWEQOqwKSEz z0iSsvhfcETODfXdY/7/HLzFMetZf+TfLfvtA6Hnt4E6RyimCB+h9Vt/mxmsT5wiL8mRgY85CZg iobp/mOTOZO8ztAfxjGQFDaQ990ceP/Tk/fe0jYS4M2L+pICbzu9f/u6hlYBJZ414sJnaFeslY5 34kfUxpkG100NCsyfCuf95FNFo1Q6tqzrnsy9pac/TOGj/CTVur0DM9/G/Nf4u8YOR+agJZswHR pywGR5/EyvH1jHzWyI9NBmX+4PHCKGctNtUI81mpjV68A== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This package is not developped anymore. * gnu/packages/video.scm (youtube-dl): Deprecate package. --- gnu/packages/video.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm index ff5dcd8daa..74cfabf6e7 100644 --- a/gnu/packages/video.scm +++ b/gnu/packages/video.scm @@ -93,6 +93,7 @@ (define-module (gnu packages video) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix utils) #:use-module (guix packages) + #:use-module (guix deprecation) #:use-module (guix download) #:use-module (guix gexp) #:use-module (guix git-download) @@ -3085,7 +3086,7 @@ (define-public yle-dl video streaming services of the Finnish national broadcasting company Yle.") (license license:gpl3+))) -(define-public youtube-dl +(define-deprecated/public youtube-dl #f (package (name "youtube-dl") (version "2021.12.17") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 23/26] gnu: Add sexpp. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:12 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064981014740 (code B ref 74035); Sun, 03 Nov 2024 16:04:12 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:30 +0000 Received: from localhost ([127.0.0.1]:33137 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4b-0003pa-HJ for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:29 -0500 Received: from 10.mo561.mail-out.ovh.net ([87.98.165.232]:44613) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4Y-0003oy-Kf for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:28 -0500 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XhKC14lVtz1NqT for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:25 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dxllp (unknown [10.108.54.88]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 5DD911FE0E; Sun, 3 Nov 2024 16:03:25 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-dxllp with ESMTPSA id ASFgBM2eJ2dzAAAAJM6qug (envelope-from ); Sun, 03 Nov 2024 16:03:25 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003fec33702-9758-4493-ba23-63593a3cc7e7, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:18 +0100 Message-ID: <20241103160239.6772-23-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11442802229428347618 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvffehgeekhfekgffgleehffetiefggeeitdduteekfffhkeehveejfeejledtieenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=U92cQpcMIFFvtafY+xePsreR0YecBHq4Z2qiMxsXF34=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649805; v=1; b=KVWwXDcvPtIugUcIBPEP1MYZOBDbz9Qi20pWFx9c+pcvoMMO2HXBPH8yMZ8OoAk0E6xxeInZ FglyzTEnLQne2sXgy9CEibH89WoPmyyG3Nctqa5yr7GRdMGfQigt4VD3/Ek3fMx5PQIeuzMR40m ydJDG9wsIz3T5GY2JQudG06FcAgSmEomhRa72D0rRDLdT6iFYmpJ5lLZsl0TDN+mnVbxH3pvSPa jaKxNvRB0IE8kTb9FzsXzMRo1WFJZ+9U0ZTyT2JUiqJ1iyTGvn2SfcetYsvhy42v2x/dUDC2LKR xuTT1t54pJsthn0g/Er+kSlG/JHXs68xe3c/CMv6utpIQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/openpgp.scm (sexpp): New variable. --- gnu/packages/openpgp.scm | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 9b6f04b407..356908ab1f 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -1,5 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2020 Justus Winter +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -157,3 +158,26 @@ (define-public rnp license:asl2.0 ;; Nominet UK's BSD 3-Clause License (netpgp). license:bsd-3))))) + +(define-public sexpp + (package + (name "sexpp") + (version "0.9.0") + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://github.com/rnpgp/sexpp") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) + (sha256 + (base32 "16y9f42w6ay3w0s23xmigqm0qi1swdfvc93g2xn3xkg1r4kpmnwq")))) + (build-system cmake-build-system) + (arguments + (list #:configure-flags '(list "-DDOWNLOAD_GTEST=off"))) + (native-inputs (list googletest pkg-config)) + (home-page "https://github.com/rnpgp/sexpp") + (synopsis "C++ library for S-expressions") + (description + "This package provides a C++ library for working with S-Expressions.") + (license license:expat))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 24/26] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:13 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064981014746 (code B ref 74035); Sun, 03 Nov 2024 16:04:13 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:30 +0000 Received: from localhost ([127.0.0.1]:33141 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4b-0003ph-VA for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:30 -0500 Received: from 5.mo560.mail-out.ovh.net ([87.98.181.248]:42469) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4Z-0003p7-PV for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:28 -0500 Received: from director7.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XhKC245crz1ZKF for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:26 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dxllp (unknown [10.111.174.42]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4731E1FE4C; Sun, 3 Nov 2024 16:03:26 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-dxllp with ESMTPSA id lv4zAs6eJ2d7AAAAJM6qug (envelope-from ); Sun, 03 Nov 2024 16:03:26 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G004982c336b-ab15-42d3-9b61-21e9cca8deb4, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:19 +0100 Message-ID: <20241103160239.6772-24-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11443083705224848098 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ESl+kZ+ZXHMYLkX1kb3CXN6RS7I6+Z/oSRoSul3YtTs=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649806; v=1; b=fwHAMSqNmARGfSpTGCdNdAjKDhNg7ObMFmD0qTOLrCnlwVfB7hNzgF+vWQpAROAtJOeuS8K1 0xYtukwgIuyBQ8UEMbMrkgbMjblVjlGqhB23DK+WMHqBKkQe7vD+q+aL4n7RuYxxbGUV2m728d3 fQuFZB09NDde1igFaP0/k1E99OU4WxHn6cI/amUPjegy1vb5mhFy08bHpOhZDxmi31CskZ2B8Ys nboYLUAfxinkMT8rOikHtOxDudFGLENNgPAf6TVwXSeRbW+qlYADIblv5tAG91DyHZwAK5P685U rZ2iCHYlFUYZqaA9lEfpFfKySL4/mKhbfILDVBml/g3sw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-29479 and CVE-2023-29480. * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. [arguments]: Improve style using gexps. <#:phases>: Add phase 'inject-sexpp-source. [inputs]: Add sexpp. --- gnu/packages/openpgp.scm | 52 +++++++++++++++++++++++----------------- 1 file changed, 30 insertions(+), 22 deletions(-) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 356908ab1f..baf786c5ee 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -23,6 +23,7 @@ (define-module (gnu packages openpgp) #:use-module (guix git-download) #:use-module (guix build-system cmake) #:use-module (guix build-system gnu) + #:use-module (guix gexp) #:use-module ((guix licenses) #:prefix license:) #:use-module (gnu packages) #:use-module (gnu packages check) @@ -98,10 +99,10 @@ (define-public dkgpg (license license:gpl2+))) (define-public rnp - (let ((day-of-release "2022-09-22")) + (let ((day-of-release "2024-05-14")) (package (name "rnp") - (version "0.16.2") + (version "0.17.1") (source (origin (method git-fetch) (uri (git-reference @@ -110,33 +111,40 @@ (define-public rnp (file-name (git-file-name name version)) (sha256 (base32 - "13z5kxm48a72w4m2crwgdjdng4a4pwxsd72r2z3a4pcakfp2swi8")))) + "052872b6a88vkcc58alxcm532y6dra5qqd997jga41v72h3pnj4d")))) (build-system cmake-build-system) - (arguments `(#:configure-flags - '("-DBUILD_SHARED_LIBS=on" - "-DBUILD_TESTING=on" - "-DDOWNLOAD_GTEST=off" - "-DDOWNLOAD_RUBYRNP=off") - #:phases - (modify-phases %standard-phases - (add-after 'unpack 'patch-tests - (lambda _ - (substitute* "src/tests/support.cpp" - (("\"cp\"") (search-input-file inputs "/bin/cp"))))) - (replace 'check - (lambda* (#:key tests? #:allow-other-keys) - (when tests? - ;; Some OpenPGP certificates used by the tests expire. - ;; To work around that, set the time to roughly the - ;; release date. - (invoke "faketime" ,day-of-release "make" "test"))))))) + (arguments + (list + #:configure-flags + ''("-DBUILD_SHARED_LIBS=on" + "-DBUILD_TESTING=on" + "-DDOWNLOAD_GTEST=off" + "-DDOWNLOAD_RUBYRNP=off") + #:phases + #~(modify-phases %standard-phases + (add-after 'unpack 'patch-tests + (lambda _ + (substitute* "src/tests/support.cpp" + (("\"cp\"") (search-input-file inputs "/bin/cp"))))) + (add-after 'unpack 'inject-sexpp-source + (lambda _ + (rmdir "src/libsexpp") + (symlink #$(package-source (this-package-input "sexpp")) + "src/libsexpp"))) + (replace 'check + (lambda* (#:key tests? #:allow-other-keys) + (when tests? + ;; Some OpenPGP certificates used by the tests expire. + ;; To work around that, set the time to roughly the + ;; release date. + (invoke "faketime" #$day-of-release "make" "test"))))))) (native-inputs (list gnupg ; for tests googletest ; for tests libfaketime ; for tests pkg-config python)) - (inputs (list botan bzip2 json-c zlib)) + (inputs (list botan bzip2 json-c sexpp zlib)) (synopsis "RFC4880-compliant OpenPGP library written in C++") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 25/26] gnu: cjson: Update to 1.7.18. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:13 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064981314759 (code B ref 74035); Sun, 03 Nov 2024 16:04:13 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:33 +0000 Received: from localhost ([127.0.0.1]:33143 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4e-0003py-Kj for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:32 -0500 Received: from 14.mo581.mail-out.ovh.net ([178.33.251.19]:55331) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4a-0003pO-NG for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:29 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.17.23]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XhKC34cNpz1BHT for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:27 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zc272 (unknown [10.111.182.119]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 659581FDA8; Sun, 3 Nov 2024 16:03:27 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-zc272 with ESMTPSA id h2+wBs+eJ2eHFAAAfvxZcA (envelope-from ); Sun, 03 Nov 2024 16:03:27 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R0050207794f-b3aa-448e-a1b6-4ac68f317c89, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:20 +0100 Message-ID: <20241103160239.6772-25-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11443365179129651938 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdegnecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=plDzbXvIvZ/KKZYFtVfcqL9jk++RjNlqv/6MLA6yRLY=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649807; v=1; b=LzXZbScIsvZ994eIdBILxvZF94gApucRMHKeHMP0L+O1k+c0OBuSM6qsKY+PhjRJMeVpC4hl v8byGliP6UNZ/izfpGL4snSLZNo9Nu0KYKNS2ySxEz+si9r5tDfCZ4TyIjAdy3D0hLF2BuyqfUI n59JygFDqQC1XkcdgEhe/dI34DNZqrUKYgDG7mbLfOSIsYR8xW9XSfkeXoeReB3GYSa08u4bSCP 0dEzb4JsUmkqMvFeEb6E9X3UncJzsZmmxJdrXEAas/Q/9MGm+d4OuvY3+3HnDvZIPFgrQCCRuJ2 beiS9UrAVtpjVOSdajdk8iLGD8RJP+kfj1KAobe0bWFiQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-50471 and CVE-2023-50472. * gnu/packages/javascript.scm (cjson): Update to 1.7.18. --- gnu/packages/javascript.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/javascript.scm b/gnu/packages/javascript.scm index 4f97dcfef6..b48acf47dc 100644 --- a/gnu/packages/javascript.scm +++ b/gnu/packages/javascript.scm @@ -49,7 +49,7 @@ (define-module (gnu packages javascript) (define-public cjson (package (name "cjson") - (version "1.7.16") + (version "1.7.18") (source (origin (method git-fetch) (uri (git-reference @@ -57,7 +57,7 @@ (define-public cjson (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "00599lzzb0vszk317n0gln7wizdpchy4warxgpj3khrir73pphbb")))) + (base32 "08p37q4i3za3dgz7wynma1fh8y4rq7pyzyjzcda710nxrmsm1pyv")))) (build-system cmake-build-system) (arguments `(#:configure-flags '("-DENABLE_CJSON_UTILS=On"))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 26/26] gnu: snapcast: Update to 0.29.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 03 Nov 2024 16:04:14 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173064981314765 (code B ref 74035); Sun, 03 Nov 2024 16:04:14 +0000 Received: (at 74035) by debbugs.gnu.org; 3 Nov 2024 16:03:33 +0000 Received: from localhost ([127.0.0.1]:33145 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4f-0003q0-1A for submit@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:33 -0500 Received: from 4.mo581.mail-out.ovh.net ([178.32.122.254]:35455) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7d4b-0003pZ-QH for 74035@debbugs.gnu.org; Sun, 03 Nov 2024 11:03:30 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XhKC45S58z1BM9 for <74035@debbugs.gnu.org>; Sun, 3 Nov 2024 16:03:28 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-ldrgj (unknown [10.108.42.118]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 84F2B1FD24; Sun, 3 Nov 2024 16:03:28 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-ldrgj with ESMTPSA id eyQwB9CeJ2f+FAAAJ4YADQ (envelope-from ); Sun, 03 Nov 2024 16:03:28 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R00699892c2e-115b-48c7-a9f5-76f0a99702a4, AE4F9A324CDBAF4B52618B2723BB28A1C21EBFEF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Sun, 3 Nov 2024 17:02:21 +0100 Message-ID: <20241103160239.6772-26-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> References: <20241103160239.6772-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11443646654176682722 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelgedgkeehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=RdZYQPfjDQDw+pmoWQUPrqP96lFd6PRtn0rmslbl4OM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730649808; v=1; b=zq3MCQ7NxGeF4IT/wxBgh2FrAl0+zD1l55Cuqh+ztmFQRMZuWKG5gwlcpZgTyTmqofSRY+W/ kkcEBKZ8jttFwWTaqeAC2/GFFY1knSdSNUdQIjK4/HhP4RuHzabBkbW63B1uVutRVOYixSocFn3 nwrzo0ybvm9pMT0DNEl19ipx8bFkbhVgyfftIE14aZl2IVzCXBDu1hH14CEcwg5Tvhjy1gWq8BR LUXQup4KqG8qDj5HUWAvP5N6AyzFwmAEAHjP/8OonQda6cwqS9B8Y38tiHw3LLT1Afjr0Y3P1yS C780CWKtmeMuUwa7R0ePP8s7v5HTdyRGA84bpGKIEKe6g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-36177. * gnu/packages/audio.scm (snapcast): Update to 0.29.0. --- gnu/packages/audio.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/audio.scm b/gnu/packages/audio.scm index eaffa0842d..467dc4a74f 100644 --- a/gnu/packages/audio.scm +++ b/gnu/packages/audio.scm @@ -1567,7 +1567,7 @@ (define-public omins-lv2 (define-public snapcast (package (name "snapcast") - (version "0.27.0") + (version "0.29.0") (source (origin (method git-fetch) (uri (git-reference @@ -1576,7 +1576,7 @@ (define-public snapcast (file-name (git-file-name name version)) (sha256 (base32 - "10l5hvmaqr9ykipsnzl95wqg19ff36rhpa1q88axxcia0k2valkn")))) + "1960xp54vsndj9vvc03kx9kg9phdchdgrfghhvcp2b0nfq2qcqqm")))) (build-system cmake-build-system) (arguments '(#:tests? #f)) ; no included tests -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 07/26] gnu: wireshark: Update to 4.4.1. [security fixes] Resent-From: Z572 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 09:39:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173071313515778 (code B ref -1); Mon, 04 Nov 2024 09:39:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 09:38:55 +0000 Received: from localhost ([127.0.0.1]:38653 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tXy-00046Q-Q0 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:38:55 -0500 Received: from lists.gnu.org ([209.51.188.17]:44928) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tXx-00046I-3u for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:38:53 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7tXv-0002el-8d for guix-patches@gnu.org; Mon, 04 Nov 2024 04:38:51 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7tXr-0008I5-Qg for guix-patches@gnu.org; Mon, 04 Nov 2024 04:38:50 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowAAnLMQUlihnCDJ8DQ--.10995S2; Mon, 04 Nov 2024 17:38:32 +0800 (CST) From: Z572 In-Reply-To: <20241103160239.6772-7-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:02 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-7-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 17:38:25 +0800 Message-ID: <87v7x3ibji.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowAAnLMQUlihnCDJ8DQ--.10995S2 X-Coremail-Antispam: 1UD129KBjvdXoW7Jw1UtFW8Xryxtr45tr4UXFb_yoWDCFc_Aa y3AwsxKrZ5XryDKrn7CFs7Jas5t3yUG3y8K3y7tr4agF98Zrs7XFs5CFy7JF1DXayktFyf Aa15JrW5uryagjkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUCVW8JwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW8JVWxJwA2z4x0Y4vEx4A2jsIE14v26r4UJVWxJr1l84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_Jr0_Jr4lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvfC2KfnxnU UI43ZEXa7IUeAHUPUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2024-9780. > > * gnu/packages/networking.scm (wireshark): Update to 4.4.1. > --- > gnu/packages/networking.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm > index 17d4072ee0..be8b5c8e93 100644 > --- a/gnu/packages/networking.scm > +++ b/gnu/packages/networking.scm > @@ -1805,14 +1805,14 @@ (define-public whois > (define-public wireshark > (package > (name "wireshark") > - (version "4.4.0") > + (version "4.4.1") > (source > (origin > (method url-fetch) > (uri (string-append "https://www.wireshark.org/download/src/wireshark-" > version ".tar.xz")) > (sha256 > - (base32 "0s8jqxcvq7ibfsq8v4scl8dq7y5hqgpivq4iw9y2x6jj136cvmga")))) > + (base32 "1v2nflm8rdifc6pwlzn1ciz22wl15zwkqs3r7gjw60kh59brd7ib")))) > (build-system qt-build-system) > (arguments > (list apply, and switch to git-fetch. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcolhEACgkQO1qpk+Gi 3/A84BAAgh92AR5B8hVrph9gh+ujI6RzqZzTVHkcmNfP73CTt0nzfS3De3ZkAbQd WSunSKq6OAq+58W9WRgEz5Ccs+spBuqZCjKzo+VSH9K8G4Ym7R83j25l79EiTEUd 1DDErEIAFpKhmQnhAGR28s1nvXk0UEzSxwJrDYjU3sm12XzrcelInn0x6T7hVj3B O1atAF8Eok6XbHASjrNS5p/r+IpU9zr9Ox9q1GJVhOugDkZBbJ2U9GV1HF05Kg6i 7CNfSfkKKxoJuHr01DBCsnIhZI1lTOAtoUw7Kf1CJV8Xcq3A9BLBS4itS0RBCE0e /LaOponWLBxhIWzJGL4pCtL1mSbEM8YMGiCfOkvgA7EQjv2zSuzW0Ah6QgKb0daN 1P6hCGoI+NQmhwBArf2Dynob7noRiWuRzi3I1Vih18UOfdZRqhTzmystp6hgxsl9 HYO5h1LTnsSOmJ5v+btFKK7OiCV6sGyfIg9hJq/NwIT6WA8rXv9V424Ya5Oal1Io wXreBBmlrnq/znRL3rJ8AETq8tXZrK3hrnXEtbqg/kn6vPpHxs2bBDozUZnZU/2X 2TJEh1HxfttjKa4x1sAaOwKq5acdKSavPpKC2s76vLMfVR4TucIIqY6pLYgK+vgz uGnkLM97+KRvDTTc5cJRnLy2m6So9E4jJppOMCy5IdhcRr1cDlI= =+M2i -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 25/26] gnu: cjson: Update to 1.7.18. [security fixes] Resent-From: Z572 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 09:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173071318115832 (code B ref -1); Mon, 04 Nov 2024 09:40:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 09:39:41 +0000 Received: from localhost ([127.0.0.1]:38662 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tYi-00047I-Lm for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:39:40 -0500 Received: from lists.gnu.org ([209.51.188.17]:50016) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tYg-000476-DT for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:39:38 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7tYf-0002mq-UT for guix-patches@gnu.org; Mon, 04 Nov 2024 04:39:38 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7tYe-0008WK-2a for guix-patches@gnu.org; Mon, 04 Nov 2024 04:39:37 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowAD3_MRPlihn+T98DQ--.20843S2; Mon, 04 Nov 2024 17:39:31 +0800 (CST) From: Z572 In-Reply-To: <20241103160239.6772-25-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:20 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-25-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 17:39:24 +0800 Message-ID: <87r07ribhv.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowAD3_MRPlihn+T98DQ--.20843S2 X-Coremail-Antispam: 1UD129KBjvdXoW7JFWkGrWDXrW7ZF4xCr1Utrb_yoWkWwbE9r ySyrWIqFW0qFyjgF48Ca17AryrXFyUXryxKw47trWxtrnxWF4rXF47Kry7AF4UAr4xKF4S krs7Ar13uryfujkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVW8JVW5JwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW8JVWxJwA2z4x0Y4vEx4A2jsIE14v26r4UJVWxJr1l84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_JrI_JrylYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvfC2KfnxnU UI43ZEXa7IUeqFAtUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2023-50471 and CVE-2023-50472. > > * gnu/packages/javascript.scm (cjson): Update to 1.7.18. > --- > gnu/packages/javascript.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/javascript.scm b/gnu/packages/javascript.scm > index 4f97dcfef6..b48acf47dc 100644 > --- a/gnu/packages/javascript.scm > +++ b/gnu/packages/javascript.scm > @@ -49,7 +49,7 @@ (define-module (gnu packages javascript) > (define-public cjson > (package > (name "cjson") > - (version "1.7.16") > + (version "1.7.18") > (source (origin > (method git-fetch) > (uri (git-reference > @@ -57,7 +57,7 @@ (define-public cjson > (commit (string-append "v" version)))) > (file-name (git-file-name name version)) > (sha256 > - (base32 "00599lzzb0vszk317n0gln7wizdpchy4warxgpj3khrir73pphbb")))) > + (base32 "08p37q4i3za3dgz7wynma1fh8y4rq7pyzyjzcda710nxrmsm1pyv")))) > (build-system cmake-build-system) > (arguments > `(#:configure-flags '("-DENABLE_CJSON_UTILS=On"))) apply --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcolkwACgkQO1qpk+Gi 3/DCug//SvFbRWJFp7hyTM8KO2gtROJt/6QwP/m0LrjU0uas4KTxo4k/q/euAhli WlXO85mB7J6bRxz80XKQHQ3pLjZQh8BK08nZc12PsX17Pb3FV4e4nE2qDx5m5FRS 1yKDFw1mr7tXYCtL4lL04cqBbDJG52qA2sINBcqenC2q7pGGTvGP2SGhGixHGoJ+ XQWghfgw/CteI02tVYKgweXhtyquxSrE7JNGEIGtwwWSOjCEWAEh4L5/E6/CXxgd TT6/jojBTGiKzk8/XNOuwF/GiJQXwrvdLCIt7twQNJiRLXDZG7/7T2Fw3Y/wcgXQ AX9EdB9WIPDuYjIJQMyv2ptKDJWkJFoUNNeZay7NWPfO9WSbm25humiODXpkhQDR 36KEcxVgyMVnysW9NnfL4hiahbOTxOi4Z+2wiil3zAXSidBFlOarPtIiZuxCCHaM WeqgzA+ugSawTR9nXuj8qwC0VrHG4GJJDw32NsRPexcCjd9rbjDwqAyWukLxjX1y qaYX7GEPMsnv+FPBh27u8evASP+h7+AtdL819fB52s1gn6hHHl6l2Cl/DxpC9ZzW YQ3mwRDGNvK4TBJDWFB8i8qi5Zcx4EpQR/02o+p6aevcS2Mp8tVocfw4KpJiQPXk Vs7WZFrdMSZyYZoJf/MHmdyEvxFydMtmOoPbJdmQ/oQEhp2tU5g= =Gy4U -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 11/26] gnu: pypy: Update to 7.3.17. [security fixes] Resent-From: Z572 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 09:41:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173071322016260 (code B ref -1); Mon, 04 Nov 2024 09:41:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 09:40:20 +0000 Received: from localhost ([127.0.0.1]:38677 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tZL-0004EA-RV for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:40:20 -0500 Received: from lists.gnu.org ([209.51.188.17]:43080) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tZJ-0004Dr-1c for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:40:18 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7tZG-0003Av-IO for guix-patches@gnu.org; Mon, 04 Nov 2024 04:40:14 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7tZE-0000Np-1h for guix-patches@gnu.org; Mon, 04 Nov 2024 04:40:14 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowACHj8dxlihnEkp8DQ--.21136S2; Mon, 04 Nov 2024 17:40:05 +0800 (CST) From: Z572 In-Reply-To: <20241103160239.6772-11-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:06 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-11-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 17:39:59 +0800 Message-ID: <87msifibgw.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowACHj8dxlihnEkp8DQ--.21136S2 X-Coremail-Antispam: 1UD129KBjvdXoW7JFWkZFW5Xr48tFWDtw1DKFg_yoWfKrb_Ar W3JFn2qrsYqrWvgF1vy3Z2yr90vFyDArs7K3ZFqFn7tF9xXwn7WF1UuryxtF18JF48KF1F ywsxCrW5Zr1qgjkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVW8JVW5JwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW8JVWxJwA2z4x0Y4vEx4A2jsIE14v26r4UJVWxJr1l84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_Jrv_JF1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Jr0_GrUvcSsGvfC2KfnxnU UI43ZEXa7IUepbytUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2022-37454. > > * gnu/packages/pypy.scm (pypy): Update to 7.3.17. > --- > gnu/packages/pypy.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/pypy.scm b/gnu/packages/pypy.scm > index a39621b5ad..90986ac096 100644 > --- a/gnu/packages/pypy.scm > +++ b/gnu/packages/pypy.scm > @@ -42,14 +42,14 @@ (define-module (gnu packages pypy) > (define-public pypy > (package > (name "pypy") > - (version "7.3.13") > + (version "7.3.17") > (source (origin > (method url-fetch) > (uri (string-append "https://downloads.python.org/pypy/" > "pypy3.10-v" version "-src.tar.bz2")) > (sha256 > (base32 > - "0v9s6pwrnaxqi5h1pvmaphj6kgyczx07ykl07hcx656h34y77haa")))) > + "1xsbn9mbxi2kai4gg1nz6n6cbqsq60qh65f5l6ld7ip9g32lpmva")))) > (build-system gnu-build-system) > (arguments > (list apply --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcolm8ACgkQO1qpk+Gi 3/BtexAApaLpsMFQg79a1uN9qK+V8HQs9Q5tTbmkFhYqqEr8HQwyKX1iOnDqY2OH CfNMPXdENX9egW/TdlotGWB8vgaKuJkHB0g8mXyWZmaEAZL0+I/adQbV83U/9ri+ mBV9iUUa8I8LO8wVblF0smHE+L/GcBFeS1MfnLC2kZsC5XcnKoAqcuKKGh3GbcEE L8mEnSLMufty+2oAiOymBL35PV2G4sZU1/BhN+4NvTSvK6bspAclKlmgf7TgVE75 K8+NjULllDISbvmR2qXhowUjXpFFAIaLePU+DN/uvstQjK4zr45QHLCuzPO5Gu/+ DTzOs5m02jWHU6ZOluqJkJtDdO+0MLRc/xbhfQ+9Np+EogCyPhfY0XSMtlGTS5NU y8dqg1pRrPxnnSPjLrlOVlSfpGXi9jiQXNmQU8jqEqwHheDrQoif9eVP2f6U4wao zm4jHk5hyshvugOSVEE5rVqr3EiiT0eEWjvxPMAjVvPxFLD4ZPGPSniDros24ctk 33yOcgC37zf9adNw9S1rLvnP+zP8lqAQwwGFj+Joah8BXVKR4HxeX+gk9spfr6Km lt2Hqba9W4po1aA9CKhMSeTIXzOQo/BfZXackJnRXz5ot/BOPqLSOUOG1lEy5aMv nBGOG/sSmx8SgocG7KmSUAl0iJ4/fFybY57IofLFUYvEUfEl/dg= =ncqq -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 09/26] gnu: darkhttpd: Update to 1.16. [security fixes] Resent-From: Z572 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 09:41:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173071325116297 (code B ref -1); Mon, 04 Nov 2024 09:41:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 09:40:51 +0000 Received: from localhost ([127.0.0.1]:38684 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tZq-0004En-NP for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:40:50 -0500 Received: from lists.gnu.org ([209.51.188.17]:47874) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7tZo-0004Ea-CO for submit@debbugs.gnu.org; Mon, 04 Nov 2024 04:40:48 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7tZn-0003Wd-CX for guix-patches@gnu.org; Mon, 04 Nov 2024 04:40:48 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7tZk-0000VG-Fz for guix-patches@gnu.org; Mon, 04 Nov 2024 04:40:46 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowACHbQiSlihn_1R8DQ--.19454S2; Mon, 04 Nov 2024 17:40:38 +0800 (CST) From: Z572 In-Reply-To: <20241103160239.6772-9-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:04 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-9-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 17:40:32 +0800 Message-ID: <87ikt3ibfz.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowACHbQiSlihn_1R8DQ--.19454S2 X-Coremail-Antispam: 1UD129KBjvJXoW7WF4DWw1fGry8WF48tF47Jwb_yoW8Zr17p3 WSvw4jkrWrAa4DJw4fWF40qr43Ww1xKF1Y9rW7Awnakw1qyFW09rW2kFWrA3WxAw1Ig3W3 WFs3Kw1UXrWkua7anT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvGb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Gr0_Xr1l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVW8Jr0_Cr1UM28EF7xvwV C2z280aVCY1x0267AKxVW0oVCq3wAa7VASzI0EjI02j7AqF2xKxVCjxxvEa2IrM2AIxVAI cxkEcVAq07x20xvEncxIr21le4C267I2x7xF54xIwI1l5I8CrVACY4xI64kE6c02F40Ex7 xfMcIj6xIIjxv20xvE14v26r1Y6r17McIj6I8E87Iv67AKxVWUJVW8JwAm72CE4IkC6x0Y z7v_Jr0_Gr1lF7xvr2IY64vIr41l42xK82IYc2Ij64vIr41l4I8I3I0E4IkC6x0Yz7v_Jr 0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF1VAY 17CE14v26r1Y6r17MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcV C0I7IYx2IY6xkF7I0E14v26r4j6F4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY 6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r4j6r4UJbIYCTnIWIevJa 73UjIFyTuYvjxUh_OzDUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2024-23770 and CVE-2024-23771. > > * gnu/packages/web.scm (darkhttpd): Update to 1.16. > [arguments]: Improve style. > --- > gnu/packages/web.scm | 24 +++++++++++------------- > 1 file changed, 11 insertions(+), 13 deletions(-) > > diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm > index 34739bf088..eb27d3448c 100644 > --- a/gnu/packages/web.scm > +++ b/gnu/packages/web.scm > @@ -6417,7 +6417,7 @@ (define-public surfraw > (define-public darkhttpd > (package > (name "darkhttpd") > - (version "1.13") > + (version "1.16") > (source > (origin > (method git-fetch) > @@ -6426,20 +6426,18 @@ (define-public darkhttpd > (commit (string-append "v" version)))) > (file-name (git-file-name name version)) > (sha256 > - (base32 "0w11xq160q9yyffv4mw9ncp1n0dl50d9plmwxb0yijaaxls9i4sk")))) > + (base32 "15mmq1v8p50mm9wx5w6g4rlr40b7d044lw7rs1wyzdiw9lcnihvm")))) > (build-system gnu-build-system) > (arguments > - `(#:make-flags > - (list (string-append "CC=" ,(cc-for-target))) > - #:tests? #f ; No test suite > - #:phases > - (modify-phases %standard-phases > - (delete 'configure) ; no configure script > - (replace 'install > - (lambda* (#:key outputs #:allow-other-keys) > - (install-file "darkhttpd" > - (string-append (assoc-ref outputs "out") > - "/bin"))))))) > + (list > + #:make-flags #~(list (string-append "CC=" #$(cc-for-target))) > + #:tests? #f ; No test suite > + #:phases > + #~(modify-phases %standard-phases > + (delete 'configure) ; no configure script > + (replace 'install > + (lambda _ > + (install-file "darkhttpd" (string-append #$output "/bin"))))))) > (synopsis "Simple static web server") > (description "darkhttpd is a simple static web server. It is > standalone and does not need inetd or ucspi-tcp. It does not need any apply, and enable tests. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcolpAACgkQO1qpk+Gi 3/C6oxAApQDhw3Id12xLy8eUmkWkzzdrdPF2c5wDygP5g5P6y+6J/JQvZKcdkjVB H7OuXXR/YBfNtCKWu3mkhI8lXE8Yw924Tz+kVnkmMZ5rmdSs+bMezWQIt9gxW8NZ HepDpj9GSnk+g9lTAOHfZOuMk9G7B4f3tMB3Pu6niiduV1UMrH8c/HgurO2XJq8H Gt71o+7WLmepGmPb/mFv8CqR+cc6NAFTRtOwx8PI9JFuw0CTYuvBfxR47W5Z5KPm DNLpf8ZrDmpKVG6keBoKZoU/ZYGoaZgcIDDYU6GBbOABWJ6QzMIMDiHUrQbJLW9f jy9D9n6uxrHVNpt1Hs85b1MwdM2gLMy59KBWL1u10WnX0v8uO3pRR/wk3LSrzgsB X8WnPFPWc9OOOmPc0SzGj/vbgBHhBL/DT5yw14LTyruah54bTm2HgLK9WE02zIJq eqV+mwDOfl2hAlDurD7HcKHGDnEsVvzepVD6RQHLv+bsQAFoKKV93jUhiQhyPhU4 wkQIGneX4xE26jR5NRsIoOx/z8Qy9m6A1b0MiUwnUbkoV+IInOMyU9wtjeZOrhw2 hnZfNOASB86YUP+NPBKtqG0jqr85qXztlv8Hwffr41IH1Nq3rWxA8dgoBvJfUew+ 4O/XV6Wu3mnnypv9SZcr2ejnDELVga/pvqmtzNZBNLRxLfIdtPM= =tSxE -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 05/26] gnu: libmobi: Update to 0.12. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 11:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173072146731604 (code B ref -1); Mon, 04 Nov 2024 11:58:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 11:57:47 +0000 Received: from localhost ([127.0.0.1]:39364 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7viN-0008Df-D7 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:57:47 -0500 Received: from lists.gnu.org ([209.51.188.17]:46330) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7viL-0008DR-Le for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:57:46 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7viL-0005tT-9q for guix-patches@gnu.org; Mon, 04 Nov 2024 06:57:45 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7viI-0003Yc-Ip for guix-patches@gnu.org; Mon, 04 Nov 2024 06:57:45 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowAAH8AqotihndIeEDQ--.15102S2; Mon, 04 Nov 2024 19:57:33 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-5-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:00 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-5-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 19:57:25 +0800 Message-ID: <87ttcnqkii.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowAAH8AqotihndIeEDQ--.15102S2 X-Coremail-Antispam: 1UD129KBjvdXoW7JFWkWrWDXw47Jr15GFyxuFg_yoWkZrX_ur W3JF9rG3yvqw4293Z7ur1vqryYqFsrAr4I9anrtFs7trn3Xr4kur43uFWxCF1UGFWIkFyF kr4xJr1rWryvgjkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUJVWUCwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwA2z4x0Y4vEx4A2jsIE14v26F4UJVW0owA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_GcCE3s1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUJVWUGwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2I x0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVW8JVW8JrUvcSsGvfC2KfnxnU UI43ZEXa7IUeAHUPUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908, > CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751, > CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889. > > * gnu/packages/ebook.scm (libmobi): Update to 0.12. > --- > gnu/packages/ebook.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/ebook.scm b/gnu/packages/ebook.scm > index dc30c98fdf..bf8dcfad09 100644 > --- a/gnu/packages/ebook.scm > +++ b/gnu/packages/ebook.scm > @@ -648,7 +648,7 @@ (define-public xchm > (define-public libmobi > (package > (name "libmobi") > - (version "0.6") > + (version "0.12") > (source (origin > (method git-fetch) > (uri (git-reference > @@ -657,7 +657,7 @@ (define-public libmobi > (file-name (git-file-name name version)) > (sha256 > (base32 > - "0yps72cm609xn2k7alflkdhp9kgr1w7zzyxjygz0n1kqrdcplihh")))) > + "0cwya9n0rd97ai0fcqjwq7b3sjzigf3ywp7bnkbbw541f3knpds9")))) > (build-system gnu-build-system) > (native-inputs > (list autoconf automake libtool)) apply. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcotqUACgkQO1qpk+Gi 3/AJPRAAk5IPg4rid83djCw1uzV9MT0rn8AW+NDmT3nT7953wzXwJgIQJZV8qNoF nua9yzQEc9dIHTifcqPNb4Ahcy914pm/iHba+bpHBSneE5pjq43MT1dMJayCT4Zw vIjjmrQSgB+T+ikrwAJsW71S9vJebBCZQlBKrJVQQYLGVyWVGIwRPJqDuflTMOfs NECA4wcBKXmYoY4MXsDWqdnJzexYqMcC26dgDRevFQuseRJePHzonC07NWFB8wD/ o7BGYYWzqfawk+q2CQ9qVRQkb41RP3yYt5VQolz70mAplZr7QiK92u+KZvWhMtU3 ChHtntcMxpGH8RzVtu8pDs+aCHshSNofx2vbxtItvBA0+D1mcZkxl4OfgnraU8OG LilkWKUAcmxVi6tPyH7QkygIVYFolcD9U83DNT1pczb8dS+YUZsA/JFKY05QUmW0 zrwhUUOiOv6D6/kUQ/VCJ4S9o0E6Qj6nsmJ923kdk5FeIBsE7+qGhjRZmJcDdpAI M2LOvCqTvIurVpuuHnwNcs5lV8tTU+d20kxsGVxC3szXaHxWHr2ZamsBoNpHEjnH cDSc0U40rDo/BqBd3gQkkmzamM/HP69VLF3yqlO/CsAEJo7T2CPBPxADzorm1fSD /HPKtZJ9yYbLqpHj85KT0FcxIgSpPbOk8nwinf9Pj9I3fpJE1Mo= =SovO -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 20/26] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 11:59:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173072152431675 (code B ref -1); Mon, 04 Nov 2024 11:59:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 11:58:44 +0000 Received: from localhost ([127.0.0.1]:39374 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vjH-0008Ep-QY for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:58:44 -0500 Received: from lists.gnu.org ([209.51.188.17]:34290) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vjF-0008Ej-5u for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:58:42 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7vjE-0006Bb-3J for guix-patches@gnu.org; Mon, 04 Nov 2024 06:58:40 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7vjB-0003cT-QQ for guix-patches@gnu.org; Mon, 04 Nov 2024 06:58:39 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowACXn8fjtihnHJWEDQ--.15076S2; Mon, 04 Nov 2024 19:58:31 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-20-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:15 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-20-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 19:58:25 +0800 Message-ID: <87plnbqkgu.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowACXn8fjtihnHJWEDQ--.15076S2 X-Coremail-Antispam: 1UD129KBjvJXoWxCr1xXw4rZr17Ary8Jw47Arb_yoW5AFWxpF yavw1akFyrtr1kA3WfWF1Iyr15Wws2qr4rKF42yw4Skws0vrW0qryxuFZ3urWUtr929a1f Xay8JF1UWF4UGrJanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvlb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWxJr0_GcWl84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_JrI_JrylYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Jr0_Gr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Gr0_Gr1UYxBIdaVFxhVjvj DU0xZFpf9x07jt4SwUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Nicolas Graves via Guix-patches via writes: > This fixes CVE-2022-26981. > > * gnu/packages/language.scm (liblouis): Update to 3.31.0. > [arguments]: Improve style using gexps. > [native-inputs]: Rewrite and replace python-wrapper by python. > --- > gnu/packages/language.scm | 47 ++++++++++++++++++--------------------- > 1 file changed, 22 insertions(+), 25 deletions(-) > > diff --git a/gnu/packages/language.scm b/gnu/packages/language.scm > index 78fcba4287..6a5e7927b4 100644 > --- a/gnu/packages/language.scm > +++ b/gnu/packages/language.scm > @@ -10,6 +10,7 @@ > ;;; Copyright =C2=A9 2023 gemmaro > ;;; Copyright =C2=A9 2024 Efraim Flashner > ;;; Copyright =C2=A9 2024 Charles > +;;; Copyright =C2=A9 2024 Nicolas Graves > ;;; > ;;; This file is part of GNU Guix. > ;;; > @@ -338,7 +339,7 @@ (define-public libchewing > (define-public liblouis > (package > (name "liblouis") > - (version "3.15.0") > + (version "3.31.0") > (source > (origin > (method git-fetch) > @@ -348,34 +349,30 @@ (define-public liblouis > (commit (string-append "v" version)))) > (file-name (git-file-name name version)) > (sha256 > - (base32 "1ljy5xsy7vf2r0ix0d7bqcr6qvr6897f8madsx9zlm1mrj31n5px"))= )) > + (base32 "02bga2l4jiyrgfqdl27wszz5yd6h80n2dmq3p6nb2br83jywisfh"))= )) > (build-system gnu-build-system) > (outputs '("out" "bin" "doc" "python")) > (arguments > - `(#:configure-flags > - (list > - "--disable-static" > - "--enable-ucs4") > - #:phases > - (modify-phases %standard-phases > - (add-after 'install 'install-python-extension > - (lambda* (#:key outputs #:allow-other-keys) > - (with-directory-excursion "python" > - (invoke "python" "setup.py" "install" > - (string-append "--prefix=3D" > - (assoc-ref outputs "python")) > - "--root=3D/"))))))) > + (list > + #:configure-flags #~(list "--disable-static" "--enable-ucs4") > + #:phases > + #~(modify-phases %standard-phases > + (add-after 'install 'install-python-extension > + (lambda _ > + (with-directory-excursion "python" > + (invoke "python3" "setup.py" "install" "--root=3D/" > + (string-append "--prefix=3D" #$output:python))))= )))) > (native-inputs > - `(("autoconf" ,autoconf) > - ("automake" ,automake) > - ("clang-format" ,clang) > - ("help2man" ,help2man) > - ("libtool" ,libtool) > - ("libyaml" ,libyaml) > - ("makeinfo" ,texinfo) > - ("perl" ,perl) > - ("pkg-config" ,pkg-config) > - ("python" ,python-wrapper))) > + (list autoconf > + automake > + clang > + help2man > + libtool > + libyaml > + texinfo > + perl > + pkg-config > + python)) > (synopsis "Braille translator and back-translator") > (description "Liblouis is a braille translator and back-translator n= amed in > honor of Louis Braille. It features support for computer and literary b= raille, apply, adjust message and use python-minimal, not python. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcotuEACgkQO1qpk+Gi 3/CjhhAAqvinK0xS4Ot9L63mETPlAWlw/WN8gQ08wMsFy9n0boXlvPfDzuGL7PDT 8r40iCXrzmFTxm/7yNhVUtQQ7wxRKqzb8eICilV3XPy0Ay1kzz+YiRnsIAAGgxAR Xe5naCat/MHBHT9Cs9yK39D8fNAKjjpaB26aGiq/iCYV/EaS29oEflsloSFuPOBr NMVAoVTLMJ/kQ0m1KJy9bGHADFbdwFktEGjBVJo9ixSzThZv5P/2t+aPshwFZGxM nz+c3hp6tHRzU0MBkjFvv+/J9JAYatU0TYr5kWvCQZDs+oQ+MML6Xw/dXi8FQSZK wze/Rx0aw7SXAqy0pvNZdVupPebP3Qj0UB7PdP1xlNNi03v2Ngw/an5RGh8jhZlJ 64NiEfXhLPiawc9dRK3E1k7kZ74eHR07cX3DNpbS+Ms5TL5sgfnSftVlfN639h/p GExf0sbrJ3cSUQwWU1pCbAzE3EefYZhRv5m9KypHRPJHkbLbnL44mjrO7JvzYePN wkQW8WKpQD6ksPtY7pjTdzgbF5inHCrLxALcwQl/HYWUAG88Df45DYHggaPL4ts8 023zJEZh2sNywhtFh0tUXpUcgzLOFEtCnR+ZJCgA9biwqEy+U/B+d+/uR5w8kVdz V57EPdbKSK4jPo+xbD06rhvf1gHxf/zXaOz1SdFQaUHxmlCNB6Y= =2ZRr -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 17/26] gnu: gifsicle: Update to 1.95. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 12:00:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173072155631756 (code B ref -1); Mon, 04 Nov 2024 12:00:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 11:59:16 +0000 Received: from localhost ([127.0.0.1]:39386 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vjo-0008G8-HL for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:59:16 -0500 Received: from lists.gnu.org ([209.51.188.17]:43952) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vjm-0008G0-C7 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:59:15 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7vjf-0006Ee-Qv for guix-patches@gnu.org; Mon, 04 Nov 2024 06:59:08 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7vjc-0003em-Rb for guix-patches@gnu.org; Mon, 04 Nov 2024 06:59:07 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowADn7UH_tihnh5uEDQ--.14455S2; Mon, 04 Nov 2024 19:58:59 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-17-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:12 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-17-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 19:58:54 +0800 Message-ID: <87ldxzqkg1.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowADn7UH_tihnh5uEDQ--.14455S2 X-Coremail-Antispam: 1UD129KBjvdXoW7JFWDtrykJr1xJr18Jw1UWrg_yoWDCrgEya 43J3s3Jr4vqrWUKF4kAFs7XFs09FWDXrWv9F17tF18KrnxXw4ruFWUGrW5CF4j9ayxK3WF ywsIvr18ZrWj9jkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUJVWUCwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwA2z4x0Y4vEx4A2jsIE14v26F4UJVW0owA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_GcCE3s1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUXVWUAwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2I x0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVW8JVW8JrUvcSsGvfC2KfnxnU UI43ZEXa7IUepbytUUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2023-44821 and CVE-2023-46009. > > * gnu/packages/image.scm (gifsicle): Update to 1.95. > --- > gnu/packages/image.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm > index 7f17c71aef..0d6593dc21 100644 > --- a/gnu/packages/image.scm > +++ b/gnu/packages/image.scm > @@ -2172,14 +2172,14 @@ (define-public swappy > (define-public gifsicle > (package > (name "gifsicle") > - (version "1.94") > + (version "1.95") > (source > (origin > (method url-fetch) > (uri (string-append "https://www.lcdf.org/gifsicle/gifsicle-" > version ".tar.gz")) > (sha256 > - (base32 "16zq5wd6fyjgy0p0mak15k3mh1zpqb9rg6gqfpg215kqq02p1jab")))) > + (base32 "0l69gn562l7a1l10zz1bfs756ipd682idgpk60qs3llz013icwdj")))) > (build-system gnu-build-system) > (arguments > '(#:phases apply, and build from git source, use g-expressions. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcotv4ACgkQO1qpk+Gi 3/CfTA/5AUh1s+ni5Zu6XSVHfe13eKWSMHLMBo8zJudzqeQ8lKxuUp9O8Jz4Zrm9 OyXLp970Gh1sSDI3Pt0HqEV38SBMsb03dxQhXXRHMSjzf2FdEP+OvRVcgGLNzI9b ZBaJm/OfK8b1q80EO5C99bGKhS/adIO1Si6zBHe2xvQWh/esUsDFE3JF+B8wv9HQ u9LkW0YpSBccIcV5mu8dqvHXQGG5ils8PNL1I+urG7nLNxl7ZGbvtjcCg+Z3SdqR IYZO6Sxq2z2NWdFfTmw6HlJYEBhv8bUBT96fax6q32DGOckLj3AW88+TYFKCndvi aMO0iXioVVqsNegvptr/YFfii/r1BpAQtG2a5exWFL2LrwQbcML5RyH26Ge1yw/K j8t2PtBUZ+yhyv9SfJdb3ujpdgspnp53IbgHipeYORsqyIyJpmDxZjJr4arqhYEC bXi8YyeClm08Vm8eJSk55W79YuIEichhV891/xhAXIkVGIzjx3Uy6KsZrl1onq4r oKK1Yx233fv8GowwJ9BxFSdsmX/hyXwxX/n57NiUGJ0DyWsSlvuygbbn1Qn37Cmm WIH8cNy82kwnR3bqB+fPEju8plggJ/bZ0OuNcMFeLPbdOt1L5MpHRZzeapQqogNd vYS4sn2tf7jxIVpDAfN1YUhQJl6eAk1w5O2XmLZ5pUFqGt5vN08= =D8qZ -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 14/26] gnu: squashfs-tools: Update to 4.6.1. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 12:00:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173072157831782 (code B ref -1); Mon, 04 Nov 2024 12:00:03 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 11:59:38 +0000 Received: from localhost ([127.0.0.1]:39392 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vk9-0008GX-Ru for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:59:38 -0500 Received: from lists.gnu.org ([209.51.188.17]:51730) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7vk6-0008GK-VT for submit@debbugs.gnu.org; Mon, 04 Nov 2024 06:59:35 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7vk6-0006Ka-IS for guix-patches@gnu.org; Mon, 04 Nov 2024 06:59:34 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7vk3-0003hb-Su for guix-patches@gnu.org; Mon, 04 Nov 2024 06:59:33 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowABHTMQZtyhnmqGEDQ--.19629S2; Mon, 04 Nov 2024 19:59:25 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-14-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:09 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-14-ngraves@ngraves.fr> Date: Mon, 04 Nov 2024 19:59:20 +0800 Message-ID: <87h68nqkfb.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowABHTMQZtyhnmqGEDQ--.19629S2 X-Coremail-Antispam: 1UD129KBjvJXoWxZr1Dtw13Wr1rtw1rKFWrGrg_yoW5Cw15p3 ZI9w4SkrW0yr15JwsaqF4fWry3Gr1rAF1jy3s7ZrW0kws0yFy0qFWxK393J3yUJw1fGa43 WFs2qw1UGFW5WFDanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvlb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVWxJr0_GcWl84ACjcxK6I 8E87Iv6xkF7I0E14v26rxl6s0DM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_Jrv_JF1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Gr0_Cr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Gr0_Gr1UYxBIdaVFxhVjvj DU0xZFpf9x07jMJPiUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.81; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2021-40153 and CVE-2021-41072. > > * gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1. > [arguments]: Improve style. > <#:make-flags>: Add INSTALL_MANPAGES_DIR value. > <#:phases>: Remove phase 'install-documentation. Add phase > 'patch-generated-source-shebangs. > [native-inputs]: Add coreutils-minimal, help2man, which. > [inputs]: Rewrite. > --- > gnu/packages/compression.scm | 52 ++++++++++++++++++------------------ > 1 file changed, 26 insertions(+), 26 deletions(-) > > diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm > index 97696ff0ef..7627717db6 100644 > --- a/gnu/packages/compression.scm > +++ b/gnu/packages/compression.scm > @@ -1023,7 +1023,7 @@ (define-public lz4 > (define-public squashfs-tools > (package > (name "squashfs-tools") > - (version "4.5") > + (version "4.6.1") > (source > (origin > (method git-fetch) > @@ -1032,34 +1032,34 @@ (define-public squashfs-tools > (commit version))) > (file-name (git-file-name name version)) > (sha256 > - (base32 "18d4nwa22vgb8j2badngjngw63f0lj501cvlh3920wqy2mqxwav6")))) > + (base32 "14nisidxx2d2qivyv7xfcg59qkj4fjiniir7nvymazdsng63gcr1")))) > (build-system gnu-build-system) > (arguments > - `(#:tests? #f ; no check target > - #:make-flags > - (list (string-append "CC=" ,(cc-for-target)) > - "XZ_SUPPORT=1" > - "LZO_SUPPORT=1" > - "LZ4_SUPPORT=1" > - "ZSTD_SUPPORT=1" > - (string-append "INSTALL_DIR=" (assoc-ref %outputs "out") "/bin")) > - #:phases > - (modify-phases %standard-phases > - (replace 'configure > - (lambda _ > - (chdir "squashfs-tools"))) > - (add-after 'install 'install-documentation > - ;; Install what very little usage documentation is provided. > - (lambda* (#:key outputs #:allow-other-keys) > - (let* ((out (assoc-ref outputs "out")) > - (doc (string-append out "/share/doc/" ,name))) > - (install-file "../USAGE" doc))))))) > + (list > + #:tests? #f ; no check target > + #:make-flags > + #~(list > + (string-append "CC=" #$(cc-for-target)) > + "XZ_SUPPORT=1" > + "LZO_SUPPORT=1" > + "LZ4_SUPPORT=1" > + "ZSTD_SUPPORT=1" > + (string-append "INSTALL_DIR=" #$output "/bin") > + (string-append "INSTALL_MANPAGES_DIR=" #$output "/share/man/man1")) > + #:phases > + #~(modify-phases %standard-phases > + (replace 'configure > + (lambda _ > + (chdir "squashfs-tools"))) > + (add-after 'patch-source-shebangs 'patch-generated-source-shebangs > + (lambda _ > + (substitute* (find-files "generate-manpages" "\\.sh") > + (("print \"#!/bin/sh") > + (string-append "print \"#!" (which "sh"))))))))) > + (native-inputs > + (list coreutils-minimal help2man which)) > (inputs > - `(("lz4" ,lz4) > - ("lzo" ,lzo) > - ("xz" ,xz) > - ("zlib" ,zlib) > - ("zstd:lib" ,zstd "lib"))) > + (list lz4 lzo xz zlib `(,zstd "lib"))) > (home-page "https://github.com/plougher/squashfs-tools") > (synopsis "Tools to create and extract squashfs file systems") > (description apply --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcotxgACgkQO1qpk+Gi 3/ArjQ/+Kg/1k8r6wzvHeXmw9htFFnp3/spc2yNQJi5BbkDjEh1suzhkRq5qPW+k jHas0ys3xi7GYTCeKuMEOdsnDJQkn5WR9jnnF5yhBnKOfxvo03Wbq+7XugU9AL8n S/2aD2I4AbJdPnW9VLOfJyDlCcraljlHP5PbWOVjSNRfeu73RETIIiMD0tcxuCmX eSOWecnfek140NAl9Lc1BTuZ4mkiD/uiSl6cnnRm6vEGd7uy6N9FX+KWc/0ivldi 5TXzbtJzPpYKuLeG2MR1FdKr6zdxD+kmI2PRIZ9vgKvspb4SN7V8DVTpCj8zGAad OqL7d5dbVmwdbvxcns0gau6LrwTCIIt2UAMtEzVlUxYwBhIpsGdxK/nrxRk38mOg ryfWMAMGfjJd0TGdzWAN0szqrP4LZWcVwdAwAeInpm7F/1NeD8FwuvobfdWVdwu6 7kLMpek65exY112OFEZ10pXBZpmeX9aYinroRd8/eBv/wtKCWGTOJb00lEwwI968 oDdt9A9RHEmfw658f/upsfj+brJOBR5PBcD04pt6/mHq2iT9lXk0RXmHS7vQYOXk kHOvBhp6cKPTMZQujwWMzqnqDk3xboR85pHmUXGBHH5sF3XC1rGbXAQKHBfig8y7 dch8qf82L/JEQjh6jpv74XHQGrUpNmGAzAwyki+7MxgelRk23rk= =Fa7b -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 16/26] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:07:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073640231503 (code B ref -1); Mon, 04 Nov 2024 16:07:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:06:42 +0000 Received: from localhost ([127.0.0.1]:40781 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zbF-0008By-N0 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:06:42 -0500 Received: from lists.gnu.org ([209.51.188.17]:35278) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zbC-0008Bq-B9 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:06:39 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7zbB-0001PZ-K8 for guix-patches@gnu.org; Mon, 04 Nov 2024 11:06:38 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zb8-0007vG-PI for guix-patches@gnu.org; Mon, 04 Nov 2024 11:06:37 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowADn73_88Chni2ovAA--.11661S2; Tue, 05 Nov 2024 00:06:25 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-16-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:11 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-16-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:06:17 +0800 Message-ID: <87cyjbq8zq.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowADn73_88Chni2ovAA--.11661S2 X-Coremail-Antispam: 1UD129KBjvJXoW7Ww17WFW8GF45Gw1rGryfJFb_yoW5JFy8pr WfuryavrW8Gryfua9xJF1fKFyYgFn5JFn5Jwn7tw18CrnIvry0grWIkFWSka47A3s7C3W3 WFWUWr4kuFy5J37anT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvvb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWUJVW8JwA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_Jr0_Gr1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUJVWUGwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2I x0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVWUJVW8JbIYCTnIWIevJa73Uj IFyTuYvjxU6cdbDUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Nicolas Graves via Guix-patches via writes: > This fixes CVE-2021-39360. > > * gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba. > --- > gnu/packages/gnome.scm | 45 ++++++++++++++++++++++-------------------- > 1 file changed, 24 insertions(+), 21 deletions(-) > > diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm > index 77a0633b50..82ea9d6699 100644 > --- a/gnu/packages/gnome.scm > +++ b/gnu/packages/gnome.scm > @@ -10591,28 +10591,31 @@ (define-public gsound > (license license:lgpl2.1+))) >=20=20 > (define-public libzapojit > - (package > - (name "libzapojit") > - (version "0.0.3") > - (source (origin > - (method url-fetch) > - (uri (string-append "mirror://gnome/sources/" name "/" > - (version-major+minor version) "/" > - name "-" version ".tar.xz")) > - (sha256 > - (base32 > - "0zn3s7ryjc3k1abj4k55dr2na844l451nrg9s6cvnnhh569zj99x"))= )) > - (build-system gnu-build-system) > - (native-inputs > - (list gobject-introspection intltool pkg-config)) > - (inputs > - (list gnome-online-accounts json-glib rest)) > - (home-page "https://wiki.gnome.org/Projects/Zapojit") > - (synopsis "Library for accessing SkyDrive and Hotmail") > - (description > - "Libzapojit is a GLib-based library for accessing online service AP= Is of > + (let ((revision "1") > + (commit "99d49bac5edc4afdcac742a0a142908e405597b0")) > + (package > + (name "libzapojit") > + (version (git-version "0.0.3" revision commit)) > + (source > + (origin > + (method git-fetch) > + (uri (git-reference > + (url "https://gitlab.gnome.org/Archive/libzapojit") > + (commit commit))) > + (file-name (git-file-name name version)) > + (sha256 > + (base32 "12frqg925rmic3rf37h5vs48xdy3mfi4ip24v0bl73h5sxy8n828"= )))) > + (build-system gnu-build-system) > + (native-inputs > + (list gobject-introspection intltool pkg-config)) > + (inputs > + (list gnome-online-accounts json-glib rest)) > + (home-page "https://wiki.gnome.org/Projects/Zapojit") > + (synopsis "Library for accessing SkyDrive and Hotmail") > + (description > + "Libzapojit is a GLib-based library for accessing online service = APIs of > Microsoft SkyDrive and Hotmail, using their REST protocols.") > - (license license:lgpl2.1+))) > + (license license:lgpl2.1+)))) >=20=20 > (define-public gnome-clocks > (package apply, and add autoconf, autoconf-archive, automake, glib:bin and libtool to fix build. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8PkACgkQO1qpk+Gi 3/AAsg//b8dcauXpiXgt2raw/prcsBBZsuSeYdGKWklQflYxhfhkNXLfN8sUFGcT sQnMrwFoffuQIfoz+EpVdnNZiWlou/wW0Ri3gjlZBmViHRvFw9nD2fE0zpkDipds RvgrK6y3x7dBXAlBo+Mpi9W4BIwyPwMEccEcTyLZfZ+gJnCwkcB+NHnhXQIuFBe/ OTonpHAFEMLlNXAbENdLBJrAlGIG5GbOPOLKr0plhoUIJkO2ZHPTaYKvvNvmb9Rx /HlHhVmO4mG16BJ5eaExf6EGBrgPfq681kQYLVYaJY6AQLBF/Mc5+93JJDHBdKi9 mQuMjx9zZ/DmJQExZhhnU2p4ipz5NBqZbjlokX3kCEEsemioBJYuEX+XRyZI0pmF lN38RRfK2W0LYqpR8m4zSX8L68hgbc7Xz+mUS/7Q1DD7+xmNVSmBBE26okaGXuNw UJJMhEfoWuCja3FrYVIbU233Vcd/8FTt1bX01FkODdsg69d5vm4g5ec0Xabgym9+ ND3FyIO2tDVC1fcK0R8cc4drJO38IONjWnY4GyqRWiCLBTir745xzqRHXiQyUzMY K6yQlKNvTRKWWmNWrGQzjVr1uN9oDO7C/OBzCT/Y0WwylVLpdub2R0L/sBcxS6iw 58lyZLLbzMHzhBcBnnwIw1PWcnlLwoC5PJjTYO9ekhsq2vn+23Q= =wWB7 -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 01/26] gnu: libyang: Update to 3.4.2. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073650131614 (code B ref -1); Mon, 04 Nov 2024 16:09:01 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:08:21 +0000 Received: from localhost ([127.0.0.1]:40792 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zcr-0008Dp-HE for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:08:21 -0500 Received: from lists.gnu.org ([209.51.188.17]:51610) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zcp-0008Db-9Q for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:08:19 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7zco-0001dV-IY for guix-patches@gnu.org; Mon, 04 Nov 2024 11:08:18 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zcm-00085G-1b for guix-patches@gnu.org; Mon, 04 Nov 2024 11:08:18 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowAA3Pn5n8Shn3YAvAA--.8213S2; Tue, 05 Nov 2024 00:08:11 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-1-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:01:56 +0100") References: <20241026223238.26667-1-ngraves@ngraves.fr> <20241103160239.6772-1-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:08:04 +0800 Message-ID: <878qtzq8wr.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowAA3Pn5n8Shn3YAvAA--.8213S2 X-Coremail-Antispam: 1UD129KBjvJXoW7KrW7tFWUAFyUuw1DWr1rWFg_yoW8Xr1fpF 4rZF15Zr1kK34rtw45KF47Kr4fWr95JFs5Ca1fAw48J3yYgF4rKrWIkF4fZFsFy34Ska17 ZF4IyF48WFW5WaDanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvvb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWUJVW8JwA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_Jr0_Gr1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUGVWUXwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2I x0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVWUJVW8JbIYCTnIWIevJa73Uj IFyTuYvjxUh8u4DUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2021-28902, CVE-2021-28903, CVE-2021-28904, > CVE-2021-28905 and CVE-2021-28906. > > * gnu/packages/networking.scm (libyang): Update to 3.4.2. > --- > gnu/packages/networking.scm | 6 +++--- > 1 file changed, 3 insertions(+), 3 deletions(-) > > diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm > index 8481e2d2f4..17d4072ee0 100644 > --- a/gnu/packages/networking.scm > +++ b/gnu/packages/networking.scm > @@ -4238,7 +4238,7 @@ (define-public iwgtk > (define-public libyang > (package > (name "libyang") > - (version "1.0.215") > + (version "3.4.2") > (source (origin > (method git-fetch) > (uri (git-reference > @@ -4247,12 +4247,12 @@ (define-public libyang > (file-name (git-file-name name version)) > (sha256 > (base32 > - "0mrs2ppmq77z8sbqgm2w0rl9bfgybd6bcxanakfww4chih6cy0dw")))) > + "07skjr3r4na12kadca2dyk45clpcpnp4zkkwfaa8sqyslx7vhj56")))) > (build-system cmake-build-system) > (arguments > `(#:configure-flags > (list "-DENABLE_BUILD_TESTS=ON" "-DENABLE_LYD_PRIV=ON"))) > - (propagated-inputs (list pcre)) > + (propagated-inputs (list pcre2)) > (native-inputs (list cmocka pkg-config)) > (home-page "https://github.com/CESNET/libyang") > (synopsis "YANG data modelling language library") apply, and update it single dependent package: frrouting. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8WQACgkQO1qpk+Gi 3/COUhAAnUcyR5ltZf7hszIyQOsDm4aQyM51m+GeODeS/ulzp7kDTbEIBD9CXEiY 4c/E+ne34AdqGi4VnRp/E8pdwR3vsLZXkISi+/EzFU6vCM2mONmceqvC6fSNzWcN El9tZfHxoufEtfa19PfY9VtmCy+6WrttvDfDkEEk/5ygU3J+R0a3qPjoIIiQo7zC JvT3FYH0sN5zsOaHdmuH7QYeqdQIW80AuOLdd7GkzJJROGbsSapPQ4zrbU4a823t NuvBNY901KjGfT+ZXR80Mn1wEEKeECQELGSrDAnVAxXqxwre9S7IVs+Js0vz32oY zlVZ7jw2K4zSDKvFWOsaBY/tKJO/PMbVpWn1vOJvf7JBGXXfu3ByP+EZVXDtaqva X1M3yZ/l/izBRkwzTqVp8dzGw16b05RiHnCuL29Ok0zd81+OkQ6zmQD6i8b145jY uS6rm+4ONLeMPiW3f+MkDgGtGubzHsxyNuVCU6JtZozAm1Yl9izq/sJ9qCfNycvH Bfgsya3hBnYBN2/L1qL9yp+7nro2IMH0GHvleOqu3ihU4lAj2YbnWDxDMbO2srlC /ZFThND4VnRBbW4E2nvvrbAlSokXvmNSFgJh2RzDkJcCA4zbXbYJj4FOHMoj+CJr 12ENLEDJuIfjl6XAP619cQ33EOnO32VeJ6vt44d9DX7UTiNcm1o= =HItf -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 02/26] gnu: python-django-4.2: Update to 4.2.16. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073652931642 (code B ref -1); Mon, 04 Nov 2024 16:09:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:08:49 +0000 Received: from localhost ([127.0.0.1]:40800 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zdJ-0008EI-B0 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:08:49 -0500 Received: from lists.gnu.org ([209.51.188.17]:37856) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zdH-0008E7-4q for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:08:47 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7zdG-0001fD-Hh for guix-patches@gnu.org; Mon, 04 Nov 2024 11:08:46 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zdE-000885-Ky for guix-patches@gnu.org; Mon, 04 Nov 2024 11:08:46 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowACnHceE8Shn6YYvAA--.11755S2; Tue, 05 Nov 2024 00:08:40 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-2-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:01:57 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-2-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:08:33 +0800 Message-ID: <874j4nq8vy.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowACnHceE8Shn6YYvAA--.11755S2 X-Coremail-Antispam: 1UD129KBjvJXoW7tF1xCF47JryDtFy7Xr1fWFg_yoW8WrW7pF 45uF1UA3y8K3y8K347GrsFqw4Fg3WfKF4kCayxA3WxAw4jgry8XrWjva98XFsrJw4fWa4a 9Fnayw15WFWUXrJanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvvb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWUJVW8JwA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_Jr0_Gr1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUXVWUAwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2I x0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVWUJVW8JbIYCTnIWIevJa73Uj IFyTuYvjxUh_OzDUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Nicolas Graves via Guix-patches via writes: > This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990, > CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231, > CVE-2023-43665 and CVE-2023-46695. > > * gnu/packages/django.scm (python-django-4.2): Update to 4.2.16. > [properties]: Add lint-hidden-cve property. > --- > gnu/packages/django.scm | 8 +++++--- > 1 file changed, 5 insertions(+), 3 deletions(-) > > diff --git a/gnu/packages/django.scm b/gnu/packages/django.scm > index 4404c8368d..4cf043f7c1 100644 > --- a/gnu/packages/django.scm > +++ b/gnu/packages/django.scm > @@ -57,13 +57,13 @@ (define-module (gnu packages django) > (define-public python-django-4.2 > (package > (name "python-django") > - (version "4.2.5") > + (version "4.2.16") > (source (origin > (method url-fetch) > (uri (pypi-uri "Django" version)) > (sha256 > (base32 > - "1ha6c5j3pizbsfzw37r52lvdz8z5lblq4iwa99mpkdzz92aiqp2y"))= )) > + "1b8xgwg3gjr974j60x3vgcpp85cg5dwhzqdpdbl8qh3cg311c5kg"))= )) > (build-system pyproject-build-system) > (arguments > '(#:test-flags > @@ -140,7 +140,9 @@ (define-public python-django-4.2 > any Web site. Django focuses on automating as much as possible and adhe= ring > to the @dfn{don't repeat yourself} (DRY) principle.") > (license license:bsd-3) > - (properties `((cpe-name . "django"))))) > + (properties `((cpe-name . "django") > + ;; This CVE seems fixed since 4.2.1. > + (lint-hidden-cve . ("CVE-2023-31047")))))) >=20=20 > (define-public python-django-3.2 > (package apply. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8YEACgkQO1qpk+Gi 3/DJdhAAvSEtjqScGIVs8W8i3VpaEgFkhr6vHGUR+yAF2w4vYnHB7Nn9T9Bp4HKB BQnWI7hHyZ88H3IQEtaE8Di0sQ/sK/afj+CYYtXVfYrKO0J9Ebhqnjq25O0I+G9T PMEdl/LN1SSmzpWKlOq4gSwMeP0U9wHgo8Tovcn1EslmNDdPcDZwC98Zp1HgWcBZ nGQ0ij+340iwTCXtRR5PcqdbOiYTP2T0mBHz9LcbGrugDzdT24RbfksMz6AU5c1Y miqei8RWt0UNGdMBiAB6dUrB2SsCqDacaE+LpWIgSKn0LUUIxPcJxeYgGZCzqDuG oyUKnSFfCHjLB0ocVSdh8Mhbr9G135jswyMrOENWnoRpsGyn2u051qLY40S7OOPO an0UtbCxucRB6kHa6RGbICDk8et6nz/fVuJ0pqeymx7H+oJVkQrvekxAhwFV1lEA /LCtOZCUtGQRkS13XUHIRMQ7PuRodxXCz7MOxIJXWEEn1Hb2CZTtj0lEySUWhLT5 TzxT/JmoizqTCYhdxbwKLHgfIq7+y/3oCZ7QmtbcO0KlNAIQjJ8+rv24cMKJPJbI 80f6+Da+CwrhEX2W5j6EtNB9AkOeyvVbQqdutoqQCpAIYrqL+cpvI6o3Hq/zLMch qqY2+Gb0CBfo7/J9sHiYuwlOD5ySZV9DbVX1F1bluqTLIQmDS8o= =e0rw -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 03/26] gnu: maradns: Update to 3.5.0036. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073656331733 (code B ref -1); Mon, 04 Nov 2024 16:10:01 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:09:23 +0000 Received: from localhost ([127.0.0.1]:40814 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zdq-0008Fl-VF for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:09:23 -0500 Received: from lists.gnu.org ([209.51.188.17]:46570) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zdn-0008FO-1T for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:09:20 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7zdm-0001kI-SB for guix-patches@gnu.org; Mon, 04 Nov 2024 11:09:18 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zdk-0008Bv-Ko for guix-patches@gnu.org; Mon, 04 Nov 2024 11:09:18 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowAA3Pn6h8Shne4wvAA--.8222S2; Tue, 05 Nov 2024 00:09:09 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-3-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:01:58 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-3-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:09:03 +0800 Message-ID: <87zfmfouao.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowAA3Pn6h8Shne4wvAA--.8222S2 X-Coremail-Antispam: 1UD129KBjvJXoW7KrW3uw4xJFWDtry8WFWrAFb_yoW8XFWDpF WkuF429w1fKw13Xay8KFW7Zw1FvrZ5tFnakw4rAa97G3yYqF9YgrWakFWrGF17Jw1kAw1a 9F4vv345Xr45taDanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvlb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVWUJVW8JwA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_Gr0_Gr1UM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_Jrv_JF1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Gr0_Cr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Gr0_Gr1UYxBIdaVFxhVjvj DU0xZFpf9x07jMJPiUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Nicolas Graves via Guix-patches via writes: > This fixes CVE-2023-31137. > > * gnu/packages/dns.scm (maradns): Update to 3.5.0036. > [properties]: Add release-monitoring-url property. > --- > gnu/packages/dns.scm | 6 ++++-- > 1 file changed, 4 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm > index e911a142ef..bd2df30f01 100644 > --- a/gnu/packages/dns.scm > +++ b/gnu/packages/dns.scm > @@ -1181,7 +1181,7 @@ (define-public public-suffix-list > (define-public maradns > (package > (name "maradns") > - (version "3.5.0022") > + (version "3.5.0036") > (source > (origin > (method url-fetch) > @@ -1189,7 +1189,7 @@ (define-public maradns > (version-major+minor version) "/" > version "/maradns-" version ".tar.xz")) > (sha256 > - (base32 "1sw267jxxxngjcar8cj3jpxnpiz0szgkhlz5l46c67qs690w9kdi"))= )) > + (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc"))= )) > (build-system gnu-build-system) > (arguments > `(#:tests? #f ; need to be root to run tests > @@ -1226,6 +1226,8 @@ (define-public maradns > (description "MaraDNS is a small and lightweight DNS server. MaraDNS > consists of a UDP-only authoritative DNS server for hosting domains, and= a UDP > and TCP-capable recursive DNS server for finding domains on the internet= .") > + (properties '((release-monitoring-url > + . "https://maradns.samiam.org/download.html"))) > (license license:bsd-2))) >=20=20 > (define-public openresolv apply. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8Z8ACgkQO1qpk+Gi 3/AaFBAAl0YKPi7fKCc3TxM/WonAYG/oidWWFj0DACqHMliML7EWPR+Za205rWot R4Dee2gfyFyxWFa1V15yJoDKH+HJxURvOAOi90GPrajGYI+tdcaJ2/M6SKZ5g+oi d/qKpPgBEibtREw92EI76++t2+LF51YqZNBMG8MKkDPdyIm6UUFKkXvVPrNhznwt ZWoDpz43+YCDjjTT8Sqqf5Je1qswAqgLP2t4e8jZD5cKfVr0ZD37gcWRJou8SYi6 BNvQyaKxCwFVL5QU+ZS4nm56OUF7jS4DjEG5xQZ7zTWnXsZRf1v3yS54Cw8dpZur Ib/oth1oVh0kR+L/QmRfKnScDwDN9C4lRTv/ZWc04nQFGAJ82yxNvB4waDDJCJOL ZaVlAAq8EdU4acfF3TFIBIarjg22yR7Baqs/yr2wKPgD/zf9VZl0jCb808WqxNzV 8HU6BVpkGaie14nUJHpVbQy1D6+Yhw8s/0c73m0In2l5Jd0LhIyKdx0A7MOZL7bb QUsCZoXcXxvMZUK3oRVxiuyvA2JgbY3a2GB0yZM8aemTtEZQ+S2exoJbDbyClCGy d/WDQEfIAyfMTCQiy0UPchiYLz6boUIdS27GQcNU1BUUOeSN0ZeK2qDhydgEvE8M l6RGkKWQc1kZQfCzM3r0+i3vCVAV3x+UkSV8nC3Ri4jLeqwc6NY= =tlNK -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 04/26] gnu: maradns: Improve style. Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:10:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073657831824 (code B ref -1); Mon, 04 Nov 2024 16:10:02 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:09:38 +0000 Received: from localhost ([127.0.0.1]:40818 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7ze5-0008HD-Bj for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:09:37 -0500 Received: from lists.gnu.org ([209.51.188.17]:47340) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7ze3-0008Gh-E4 for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:09:35 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7ze3-0001ny-5r for guix-patches@gnu.org; Mon, 04 Nov 2024 11:09:35 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zdz-0008Ds-Rz for guix-patches@gnu.org; Mon, 04 Nov 2024 11:09:34 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowABXXn6z8Shnqo8vAA--.9321S2; Tue, 05 Nov 2024 00:09:27 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-4-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:01:59 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-4-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:09:20 +0800 Message-ID: <87v7x3oua7.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowABXXn6z8Shnqo8vAA--.9321S2 X-Coremail-Antispam: 1UD129KBjvJXoWxCr18Cw4kXw4fXry5JF48tFb_yoW5Aryrpa n093sagr4rAw17Ka1fWF4qqr15Ka40kw1Ykrn7A3sIkw4YyFy0qrWagFZ5Aa4Igwn7C3y7 XF4rCFW5uFW7GwUanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvlb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVWUJVW8JwA2z4x0Y4vEx4 A2jsIEc7CjxVAFwI0_Gr0_Gr1UM2vj62AExVA0xI801c8C04v26x02cVCv0xWle2I262IY c4CY6c8Ij28IcVAaY2xG8wASzI0EjI02j7AqF2xKxwAqx4xG64xvF2IEw4CE5I8CrVC2j2 WlYx0E2Ix0cI8IcVAFwI0_JF0_Jw1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkE bVWUJVW8JwACjcxG0xvEwIxGrwCF04k20xvY0x0EwIxGrwCFx2IqxVCFs4IE7xkEbVWUJV W8JwC20s026c02F40E14v26r1j6r18MI8I3I0E7480Y4vE14v26r106r1rMI8E67AF67kF 1VAFwI0_Jrv_JF1lIxkGc2Ij64vIr41lIxAIcVC0I7IYx2IY67AKxVWUJVWUCwCI42IY6x IIjxv20xvEc7CjxVAFwI0_Gr0_Cr1lIxAIcVCF04k26cxKx2IYs7xG6r1j6r1xMIIF0xvE x4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_Gr0_Gr1UYxBIdaVFxhVjvj DU0xZFpf9x07j_IDcUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > * gnu/packages/dns.scm (maradns)[arguments]: Use gexps. > --- > gnu/packages/dns.scm | 58 ++++++++++++++++++++++---------------------- > 1 file changed, 29 insertions(+), 29 deletions(-) > > diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm > index bd2df30f01..7a78fb0308 100644 > --- a/gnu/packages/dns.scm > +++ b/gnu/packages/dns.scm > @@ -1192,35 +1192,35 @@ (define-public maradns > (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) > (build-system gnu-build-system) > (arguments > - `(#:tests? #f ; need to be root to run tests > - #:make-flags > - (list > - ,(string-append "CC=" (cc-for-target)) > - (string-append "PREFIX=" %output) > - (string-append "RPM_BUILD_ROOT=" %output)) > - #:phases > - (modify-phases %standard-phases > - (replace 'configure > - (lambda* (#:key native-inputs target #:allow-other-keys) > - ;; make_32bit_tables generates a header file that is used during > - ;; compilation. Hence, during cross compilation, it should be > - ;; built for the host system. > - (when target > - (substitute* "rng/Makefile" > - (("\\$\\(CC\\) -o make_32bit_tables") > - (string-append (assoc-ref native-inputs "gcc") > - "/bin/gcc -o make_32bit_tables")))) > - (invoke "./configure"))) > - (add-before 'install 'create-install-directories > - (lambda* (#:key outputs #:allow-other-keys) > - (let ((out (assoc-ref outputs "out"))) > - (for-each (lambda (dir) > - (mkdir-p (string-append out dir))) > - (list "/bin" "/sbin" "/etc" > - "/share/man/man1" > - "/share/man/man5" > - "/share/man/man8")) > - #t)))))) > + (list > + #:tests? #f ; need to be root to run tests > + #:make-flags > + #~(list > + (string-append "CC=" #$(cc-for-target)) > + (string-append "PREFIX=" #$output) > + (string-append "RPM_BUILD_ROOT=" #$output)) > + #:phases > + #~(modify-phases %standard-phases > + (replace 'configure > + (lambda* (#:key native-inputs target #:allow-other-keys) > + ;; make_32bit_tables generates a header file that is used during > + ;; compilation. Hence, during cross compilation, it should be > + ;; built for the host system. > + (when target > + (substitute* "rng/Makefile" > + (("\\$\\(CC\\) -o make_32bit_tables") > + (string-append (search-input-file native-inputs "/bin/gcc") > + " -o make_32bit_tables")))) > + ;; ./configure doesn't support default flags > + (invoke "./configure"))) > + (add-before 'install 'create-install-directories > + (lambda _ > + (for-each (lambda (dir) > + (mkdir-p (string-append #$output dir))) > + (list "/bin" "/sbin" "/etc" > + "/share/man/man1" > + "/share/man/man5" > + "/share/man/man8"))))))) > (home-page "https://maradns.samiam.org") > (synopsis "Small lightweight DNS server") > (description "MaraDNS is a small and lightweight DNS server. MaraDNS apply. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8bAACgkQO1qpk+Gi 3/BlzBAAkavhAKy2Zsu/r0NIEgbKdMte3JwqBM1fGCpczEgLG//+JvKkNyQlp+ds KZtz3BaLvAHtm3FNRmMn0eeI0U+W0FeFR0at6D8piE0Kqs680dFdNufTRY0FCf9c x5NmP3361EempZo8hXK0IOELHng/GVIU4lmy4ChszsoOShWRq4wmzO/qhlQGhcEP a5/k5YBauQCy2UWW64O9njoCe1rj8MTJ7v6tPI3JvGD+988b3rKL7w2hFgUJ46Cb gJUBEPPv1M/fSaODU1gGPgo4BI66Z8oVzGzVbjw7XzjpPjJZQlANPuyjDmMcAXyn 7Kzj6nNJusl0o1bK5aMAQBn/L5mvh9vYbHyK4pDdqMcWPIS5Axxh8TJG1BEIYpK3 Q1wtu9Ur4kNpiSTnfxnHGxqeoS+tZwCMSifAEKF3BEdIS+o8qn3KZ9ZX3XKl5kzq /rDCWc/7nehOQSTXJZM89qEEclZAhqSXNN+j22LTC2iPwDNxZnn21HjEm4r8Sn68 yHP7JEm0nB9fhdGrtFhbwn/3yjfJ2zpzEXkH3g6nZOoaMpcm5+G0sxB1wFyqW9xC K3Uw8QAjYsNc47XqMj6VMp+Dnk1J+66jMcF+W5o0ivPun2IddriPz3E3e1LxFM3J gmBW/Tlibg06zXUdNYOZvP690kbuiBeN8tSRC8+AtPvgBhbmK7I= =uIq9 -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 10/26] gnu: xlsxio: Update to 0.2.35. [security fixes] Resent-From: Zheng Junjie Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 16:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: ngraves@ngraves.fr X-Debbugs-Original-To: Nicolas Graves via Guix-patches via X-Debbugs-Original-Cc: Nicolas Graves , 74035@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173073674032492 (code B ref -1); Mon, 04 Nov 2024 16:13:01 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 16:12:20 +0000 Received: from localhost ([127.0.0.1]:40853 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zgh-0008Rz-Un for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:12:20 -0500 Received: from lists.gnu.org ([209.51.188.17]:59198) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7zgf-0008Ri-RX for submit@debbugs.gnu.org; Mon, 04 Nov 2024 11:12:18 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7zgf-0003DQ-Ma for guix-patches@gnu.org; Mon, 04 Nov 2024 11:12:17 -0500 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1t7zgd-0000MW-9G for guix-patches@gnu.org; Mon, 04 Nov 2024 11:12:17 -0500 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowAD3_39W8ihnuLQvAA--.11566S2; Tue, 05 Nov 2024 00:12:10 +0800 (CST) From: Zheng Junjie In-Reply-To: <20241103160239.6772-10-ngraves@ngraves.fr> (Nicolas Graves via Guix-patches via's message of "Sun, 3 Nov 2024 17:02:05 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-10-ngraves@ngraves.fr> Date: Tue, 05 Nov 2024 00:12:04 +0800 Message-ID: <87r07rou5n.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowAD3_39W8ihnuLQvAA--.11566S2 X-Coremail-Antispam: 1UD129KBjvdXoW7Jw1UCrWDCryDKF1fXrWxtFb_yoWDXFc_u3 s3Ar93GrW0qrn8KFWkCF4IkF95t3WxXrs2grZxtrykK3s8Wr4fWFy2grW2y3WYvan2kFyr Cw45Arn5ury09jkaLaAFLSUrUUUUjb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUIcSsGvfJTRUUUbsAYjsxI4VWkKwAYFVCjjxCrM7AC8VAFwI0_Jr0_Gr1l1xkIjI8I 6I8E6xAIw20EY4v20xvaj40_Wr0E3s1l1IIY67AEw4v_Jr0_Jr4l8cAvFVAK0II2c7xJM2 8CjxkF64kEwVA0rcxSw2x7M28EF7xvwVC0I7IYx2IY67AKxVWUCVW8JwA2z4x0Y4vE2Ix0 cI8IcVCY1x0267AKxVW8JVWxJwA2z4x0Y4vEx4A2jsIE14v26r1j6r4UM28EF7xvwVC2z2 80aVCY1x0267AKxVW8JVW8Jr1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E0xvY zxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I80ew Av7VC0I7IYx2IY67AKxVWUAVWUtwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY 6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r1j6r 4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CEb7AF 67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1I6r4UMIIF0xvE2I x0cI8IcVCY1x0267AKxVW8JVWxJwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2 z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVW8JVW8JrUvcSsGvfC2KfnxnU UI43ZEXa7IUeGsj5UUUUU== X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Nicolas Graves via Guix-patches via writes: > This fixes CVE-2023-34795. > > * gnu/packages/xml.scm (xlsxio): Update to 0.2.35. > --- > gnu/packages/xml.scm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm > index cfd53a291a..4a3936b66d 100644 > --- a/gnu/packages/xml.scm > +++ b/gnu/packages/xml.scm > @@ -1545,7 +1545,7 @@ (define-public xerces-c > (define-public xlsxio > (package > (name "xlsxio") > - (version "0.2.33") > + (version "0.2.35") > (source > (origin > (method git-fetch) > @@ -1554,7 +1554,7 @@ (define-public xlsxio > (commit version))) > (file-name (git-file-name name version)) > (sha256 > - (base32 "16i3yd168kb63za7jpycpb2by4831gz7wi90vzifdf85csc8c70s")))) > + (base32 "140ap2l3qy27z1fhqpkq3a44aikhr3v5zlnm9m8vag42qiagiznx")))) > (native-inputs > (list expat gnu-make minizip which)) > (build-system gnu-build-system) apply --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmco8lQACgkQO1qpk+Gi 3/DP/hAAve4s2k8SSqChFNR02OU6XxFkX11rI0ybto6vdxTK+p6j+GCDHWkAtCpM 1bO4B3E9R7ChLwUgc/4auIfC2TuISW5LLH9AEtB2c9IyGGetw2WyPrjK57WH2PRp W37kG5sJvSY/fO4NMaA7PJRYke4ifibCD9mS/+Lb+8pn9eMTBG2t1gvZVbg4lsGF 4RomjD1y/UQ9t/7/dChB7FebC9GFnyTkUkpvu4yth5ntwgUsl3P7yhbYuF1Ag0Ef bLL7iReiSwbHArkQUSZR5O+GOh3KlP8vtN25dPAoEP4PqyrJdtOtW0l4aRNOFXeO l6Eg2GvWU5Mn4ZUliPGOEpaSdcYyR/vT5EqMFWgjW0BoMyaKwx1WpJIOHdSNJCna JE0cFJbeDGr+qgT82B3TCpAU4AQPu8Gt6QrpIjCVY5i31BzRBTz+bPpcvDinPRdb Hs5NP9PlMTGHnSZZzE18IL6Qclxj8YEZcnE87YCH/C4Cma/PubNvICKAIHtcM5EP 9cgcZEBsH3XjArkj6nujgDC5SARH2YcLUosniGOW9AU2k0bQEWNtJkimWYsN1vVY Bu6E4yiWtWbVtUSgrxpSGgm1w7u2uEG25PSNLHHrzN9+JomWrz+OuuYsZw0RBkSl 6KgqCz0cQKkoB99UNeOT3inchxoDSDoIQ+6cjWKf1mDF7v7VTxA= =6LOy -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v3 0/8] [security] fixes for near-leaf packages References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:13:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084836515665 (code B ref 74035); Tue, 05 Nov 2024 23:13:02 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:12:45 +0000 Received: from localhost ([127.0.0.1]:38328 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Sj7-00044a-Dx for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:45 -0500 Received: from 2.mo575.mail-out.ovh.net ([46.105.52.162]:48887) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Sj4-00044P-M8 for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:44 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.109.140.5]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XjkdN6FkLz1n3R for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:12:40 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-cj2z6 (unknown [10.110.118.207]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 27E9E1FE47; Tue, 5 Nov 2024 23:12:39 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-cj2z6 with ESMTPSA id LlWxLmemKmdTLAIAev2Wmw (envelope-from ); Tue, 05 Nov 2024 23:12:39 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R00521925ef1-dc0c-4444-a45f-eab5710c095e, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:10:09 +0100 Message-ID: <20241105231235.21106-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11990834012136399586 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekffegteffgfffjeegjedvfffgtddvueeutefgfeeuvdejgedvgeejjeevueeuveenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtgeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhegmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ysO2IpVANF8TCXlDTubevmLO6mYPQus18Tp9G7p00Ww=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848360; v=1; b=1rXF6Q8XHKPEAzim09PjI9pY63s9moLEZspCl+DpO5AT7f6uGrI5pRFjC/KYISnnPQQgdMiW w2BK3Ps1QzW3DnOGH9jZRMw/tIHSDHKC3QIQa46eb4v5Uy8niHiJtG1clfEJy1CAqmnzTMZBMOn d3LSbRHE/tlQvI+N+Vz3zUnoRjjLqFMEuDFFfO8K7c5JwwvmBU3fMCkmEO0nx+RJD9XAVWkuJQU 5XxKUhfdMoWIfQ0MPqJUz7b2AL3CZ9RcmpBPDEbVEvB1KcGrQ+MvW0Bjwe1JyzBIs8gn9B6RkVP VSlY4WUdjWg0BuibEwADlc2iDC5ln10/9a8sCBOphqtig== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This patch series removes patches that have been built in the v2, so that it's easier to review. It's also a bump for QA. Nicolas Graves (8): gnu: bart: Update to 0.9.00. [security fixes] gnu: pam-u2f: Update to 1.3.0. [security fixes] gnu: sendmail: Update to 8.18.1. [security fixes] gnu: openvpn: Update to 2.6.12. [security fixes] gnu: youtube-dl: Deprecate package. gnu: unicorn: Update to 2.1.1. [security fixes] gnu: Add sexpp. gnu: rnp: Update to 0.17.1. [security fixes] gnu/packages/emulators.scm | 9 +++- gnu/packages/image-processing.scm | 8 ++-- gnu/packages/mail.scm | 5 +- gnu/packages/openpgp.scm | 76 ++++++++++++++++++++++--------- gnu/packages/security-token.scm | 9 ++-- gnu/packages/video.scm | 3 +- gnu/packages/vpn.scm | 4 +- 7 files changed, 75 insertions(+), 39 deletions(-) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v3 1/8] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:13:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084837015685 (code B ref 74035); Tue, 05 Nov 2024 23:13:02 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:12:50 +0000 Received: from localhost ([127.0.0.1]:38334 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SjB-00044v-NL for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:49 -0500 Received: from 10.mo583.mail-out.ovh.net ([46.105.52.148]:49973) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Sj9-00044k-DJ for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:48 -0500 Received: from director9.ghost.mail-out.ovh.net (unknown [10.109.148.79]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XjkdT73CLz1TMW for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:12:45 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dn5kt (unknown [10.110.168.82]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id AC4981FD7D; Tue, 5 Nov 2024 23:12:45 +0000 (UTC) Received: from ngraves.fr ([37.59.142.97]) by ghost-submission-5b5ff79f4f-dn5kt with ESMTPSA id oyYZDm2mKmcBvD4AFL8Frw (envelope-from ); Tue, 05 Nov 2024 23:12:45 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-97G0021227c179-20fc-4536-bc33-e1bb4d79b726, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:10:10 +0100 Message-ID: <20241105231235.21106-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231235.21106-1-ngraves@ngraves.fr> References: <20241105231235.21106-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11992241383926915810 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvheelieffheetvdelhfffffejfefgudfhteekveehieetudeiudfgkeeutdehjeenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdeljeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekfegmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848366; v=1; b=VKxhe5fgZByUVno65FxHV/FOAC14YjgEOaPTAtCXAgKsF9aNA+TTRLgBQDgFLz+97CUjHExi 4+PD4o2w4eOdEgXl7ryA4u5Pju/aU6NFy7uAtp/+M3V68lqz3we9jGrfxzQKWEcKuLO3bZaORsb Yh3RPZAv92enClVMaAWNb/cY8EOr+y9nNCI1jP/RzBIw6CHGcLgQeLSrYhxHPqTbg3yz5SH3z8S SK9zYdNLZaYnoXhAt3ClcjwysPa4qWwG+FqKUNUYncEAnhNa0HvWiMRVrsT3lr7Tba41hGmlLoO vHqO+uzRz4ewksElhePTZK+1K+Zqetk9GoGbDs+je4TMw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v3 2/8] gnu: pam-u2f: Update to 1.3.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:13:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084837215705 (code B ref 74035); Tue, 05 Nov 2024 23:13:03 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:12:52 +0000 Received: from localhost ([127.0.0.1]:38338 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SjE-00045E-20 for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:52 -0500 Received: from 8.mo560.mail-out.ovh.net ([188.165.52.147]:57043) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SjA-00044m-Vc for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:50 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.108.2.197]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XjkdW4LSsz1dp2 for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:12:47 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-cj2z6 (unknown [10.110.164.77]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C3C3C1FDC3; Tue, 5 Nov 2024 23:12:46 +0000 (UTC) Received: from ngraves.fr ([37.59.142.95]) by ghost-submission-5b5ff79f4f-cj2z6 with ESMTPSA id UBuUD26mKmdcLAIAev2Wmw (envelope-from ); Tue, 05 Nov 2024 23:12:46 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-95G001ee36fb34-4620-4621-9048-09266f1a50fc, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:10:11 +0100 Message-ID: <20241105231235.21106-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231235.21106-1-ngraves@ngraves.fr> References: <20241105231235.21106-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11992804334080811746 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeejffefheejkefgjeelvdekhefgueefveelvefftedvfedtvddtvdejjefhudffudenucffohhmrghinhephihusghitghordgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitdgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848367; v=1; b=TQLYiV6nUqwlX/oli+joO2JtfDdv0TjgFWKVg1C7METpHcKkSBww/pYgyaFuHrCoBA/sbjni WF47i2K1yaDPO16Nf6/swjaTMRip8AsgFz7aAqLCfhqCVCcjcLi59foFKwfK4pVLLcFx6zffzGA k/8UQC3gWQtJilD8s0AJKp2PX+POHPvjsYMN7LRtFlRgQNsbLC0mPjAhJkxBxB3E8o5aklVgucQ VCw79ytPw3EcOS+PELqnvQNt7W7jIM6RawxKt4NE5kCGVo9STzi0e85/9UW3l3LpKUiJl3tuZuy eeTHe9sEND97qhFkpQJbmLKqR56ITNY1Wmaccm7IYkK4w== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. --- gnu/packages/security-token.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/security-token.scm b/gnu/packages/security-token.scm index 5abb461c0c..156a7d5e28 100644 --- a/gnu/packages/security-token.scm +++ b/gnu/packages/security-token.scm @@ -682,7 +682,7 @@ (define-public libu2f-server (define-public pam-u2f (package (name "pam-u2f") - (version "1.0.8") + (version "1.3.0") (source (origin (method git-fetch) (uri @@ -691,17 +691,16 @@ (define-public pam-u2f (commit (string-append "pam_u2f-" version)))) (file-name (git-file-name name version)) (sha256 - (base32 - "04d9davyi33gqbvga1rvh9fijp6f16mx2xmnn4n61rnhcn2jac98")))) + (base32 "1swvys98mw7ailllgqicvhj315qajhvqrmm314cp3bj0l76s9qpv")))) (build-system gnu-build-system) (arguments `(#:configure-flags (list (string-append "--with-pam-dir=" (assoc-ref %outputs "out") "/lib/security")))) (inputs - (list libu2f-host libu2f-server linux-pam)) + (list libfido2 linux-pam openssl)) (native-inputs - (list autoconf automake libtool asciidoc pkg-config)) + (list asciidoc autoconf automake libtool pkg-config)) (home-page "https://developers.yubico.com/pam-u2f/") (synopsis "PAM module for U2F authentication") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v3 3/8] gnu: sendmail: Update to 8.18.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:13:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084837215712 (code B ref 74035); Tue, 05 Nov 2024 23:13:03 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:12:52 +0000 Received: from localhost ([127.0.0.1]:38340 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SjE-00045G-EO for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:52 -0500 Received: from 9.mo576.mail-out.ovh.net ([46.105.56.78]:36297) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SjC-00044t-3x for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:12:51 -0500 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.9.41]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XjkdX54JQz1mhR for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:12:48 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-c2mfd (unknown [10.111.182.20]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 2E0901FE47; Tue, 5 Nov 2024 23:12:48 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-c2mfd with ESMTPSA id CtmfNG+mKmchDAAAaNthMg (envelope-from ); Tue, 05 Nov 2024 23:12:48 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R00348c4b5d0-0f81-4c13-b620-3e3ea031c5b4, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:10:12 +0100 Message-ID: <20241105231235.21106-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231235.21106-1-ngraves@ngraves.fr> References: <20241105231235.21106-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 11993085809410499298 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpefgudehvdegieeiieefleekudehtdehteduleefvedviefhkeefkeeiieffheevveenucffohhmrghinhepshgvnhgumhgrihhlrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeeimgdpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=pafjSbyWBfLgi+3s2nYnsAzEBTRAYd+jNDlHyBEe9aI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848368; v=1; b=wVLhWqjK0fSqZPArdKTXWlTIokORsAk0Ifc0OnGXyMlA1LY3DB2amAbWI3/uAHsT3fkZSGrX BNFASTEQl5E5CCNfsiY3AEiDSGyS/BE6N4K0t5XhIrSR8od3T398Hcg7tLbdEdVC8fvnAVQ2Lwh 5S3NNWpo2MPXhZV589rCgihTe9tR2yHtudfWsF2ohjQjkgfJ4Ph6q/EGAZvZH6D5lsRkVR5i1Th 11M+KMJhT9gyklIINd/jYYaDZVKL6D7MxM7/p5xV/e0cgC3KJJjDr+q2z5I6wkSYat3zQKgu+Rz m59oYquBMSNWPI5qwEXE5xz3ItDC446XElNSEfM+zf7mQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. --- gnu/packages/mail.scm | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 2c69a7b818..ca1a55818e 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -3122,7 +3122,7 @@ (define-public mhonarc (define-public sendmail (package (name "sendmail") - (version "8.15.2") + (version "8.18.1") (source (origin (method url-fetch) @@ -3130,8 +3130,7 @@ (define-public sendmail "ftp://ftp.sendmail.org/pub/sendmail/sendmail." version ".tar.gz")) (sha256 - (base32 - "0fdl9ndmspqspdlmghzxlaqk56j3yajk52d7jxcg21b7sxglpy94")))) + (base32 "0w07iw4imp9wvczd2mijns7zxl8p1wk29b9yrzvhcj4fqc4z7wfb")))) (build-system gnu-build-system) (arguments `(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 1/8] gnu: bart: Update to 0.9.00. [security fixes] References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084842215823 (code B ref 74035); Tue, 05 Nov 2024 23:14:02 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:13:42 +0000 Received: from localhost ([127.0.0.1]:38348 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Sk1-000479-RA for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:13:42 -0500 Received: from 8.mo560.mail-out.ovh.net ([188.165.52.147]:52977) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Sjz-000470-Ch for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:13:40 -0500 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.17.43]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XjkfV5ZFCz1dpK for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:13:38 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zxtkr (unknown [10.110.118.96]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 5CCD31FE03; Tue, 5 Nov 2024 23:13:38 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-zxtkr with ESMTPSA id 4P6RO6GmKmd4TAAAWQtOqg (envelope-from ); Tue, 05 Nov 2024 23:13:38 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002cbd1978f-cc69-4edc-b617-059a41ef053e, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:24 +0100 Message-ID: <20241105231336.21640-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12007159557556134626 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeetfeefhfffhfejveeluedvhefggfevkeehuefhkefhheeugfehffehudfggeelieenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitdgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848418; v=1; b=Tg46UckVta8iG9HmYDnj8GVB9WeYwM9uySpYvDw0cB3xswowe5Zfalh5+PHlIwOcZ4Sogfzh CPA1sxy8VWFP2l1cAqHG42oW57btouUtMd67qImD8bPIo57ny39xp5nRcsEFZBStZROrCBuiP7Y QKnNAEwyENXTxKQM7KOCtDTSmjDhAt7YQWkyJRK/LjCPOo/QVLp3ULlI7xzul5wdC9GyEJBrZVe UKkAY0S6bbjrWRWniirDXHZY0bTobrP+2gSBKfi0K+ZptkFrOp91mbxVLzPlOX86xLyOZv+v9Mb UdaPw3pqwbAwGsF5pmFidJr/yRxrDjwlScuKc/Nn6JAww== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 1/8] gnu: bart: Update to 0.9.00. [security fixes] References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845315902 (code B ref 74035); Tue, 05 Nov 2024 23:15:01 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:13 +0000 Received: from localhost ([127.0.0.1]:38355 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkX-00048P-7V for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:13 -0500 Received: from 9.mo561.mail-out.ovh.net ([87.98.184.141]:38971) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkU-00048D-Ty for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:11 -0500 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4Xjkg40mHsz1Rkb for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-6sxkh (unknown [10.110.118.7]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C9FF21FD6A; Tue, 5 Nov 2024 23:14:07 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-6sxkh with ESMTPSA id n32iKL+mKmcXcgAApMpp8w (envelope-from ); Tue, 05 Nov 2024 23:14:07 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R006e12ca3a4-b66e-410d-be88-e354b0e200cc, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:51 +0100 Message-ID: <20241105231405.21806-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12015603809029120738 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeetfeefhfffhfejveeluedvhefggfevkeehuefhkefhheeugfehffehudfggeelieenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedumgdpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848448; v=1; b=QLseYXw613ePMl7sM0vGnpFwPfBEXFVvN4Lq5ASWCMGQXwIODp+OuOwWktk9Vtk3xB65FpBK zorhXkGsGog+yUWKXS0b+W3dvW3AReKkWhcdjNWqEyl7vsj8Szn0wIaThJsGOvdrwkk3Kc1xXOB EYDXe0p7aNHpIQe83VVBpzvTsXo3IN6acLiYeDraNHWDq7hEAqEhdMn3GmA7aqmXpAUVc52btMF drXsG9P9PffWPUOLH+PPhso6yIxuAmRZR55gC8hIXRMbVZ3CbTq1qpN+8CA7BRUkbcLy9XH0USX UeOfYYPEc+uvNL1yqFJmtdPZz6yknSkLWylct3V7cTmpQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 2/8] gnu: pam-u2f: Update to 1.3.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845615930 (code B ref 74035); Tue, 05 Nov 2024 23:15:02 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:16 +0000 Received: from localhost ([127.0.0.1]:38361 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkZ-00048l-J7 for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:15 -0500 Received: from 6.mo561.mail-out.ovh.net ([188.165.43.173]:58863) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkW-00048H-2X for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:13 -0500 Received: from director2.ghost.mail-out.ovh.net (unknown [10.108.2.89]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4Xjkg66Zf5z1Ly0 for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:10 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-6hr7g (unknown [10.111.174.174]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 9DAD81FDBE; Tue, 5 Nov 2024 23:14:10 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-6hr7g with ESMTPSA id AW3ZDMKmKmfGvwIA7aBLUg (envelope-from ); Tue, 05 Nov 2024 23:14:10 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0029ce49d92-03bf-486e-a4a5-3944655efb68, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:52 +0100 Message-ID: <20241105231405.21806-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12016166759936615138 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeejffefheejkefgjeelvdekhefgueefveelvefftedvfedtvddtvdejjefhudffudenucffohhmrghinhephihusghitghordgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiudgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848451; v=1; b=VUxLwYRcSvfZtTbO+2ReU5bWEJzf1/97zDFi5DXAwhCM7xls0E5EnpSZpsfxSFXIA3kleqcS xAAnH8O6jdDCQniz+QSoCtEe/rNT67cfc2+MRHVgSjCmAbT6fnDTu2iWiESiW1NUWllNdM3X5TF w6iWs/9FqtdOeTBI0OFaZlqx54WpVT06fo2D/GP2ql0TY1xVI7TA0LP5M9Vj2yfy+0dhqFhpfXJ 2tlqyrD47Ff326dYRCio8A2bkXrVKMkdJaZI05rDAHjhdSyHFbl0XAB3t/NSeNQPVe0yjHk63Fo yn5N/ABUUTEf7j+zDVfe37qS5F4IyWfuP7ixMZ6nceEgQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. --- gnu/packages/security-token.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/security-token.scm b/gnu/packages/security-token.scm index 5abb461c0c..156a7d5e28 100644 --- a/gnu/packages/security-token.scm +++ b/gnu/packages/security-token.scm @@ -682,7 +682,7 @@ (define-public libu2f-server (define-public pam-u2f (package (name "pam-u2f") - (version "1.0.8") + (version "1.3.0") (source (origin (method git-fetch) (uri @@ -691,17 +691,16 @@ (define-public pam-u2f (commit (string-append "pam_u2f-" version)))) (file-name (git-file-name name version)) (sha256 - (base32 - "04d9davyi33gqbvga1rvh9fijp6f16mx2xmnn4n61rnhcn2jac98")))) + (base32 "1swvys98mw7ailllgqicvhj315qajhvqrmm314cp3bj0l76s9qpv")))) (build-system gnu-build-system) (arguments `(#:configure-flags (list (string-append "--with-pam-dir=" (assoc-ref %outputs "out") "/lib/security")))) (inputs - (list libu2f-host libu2f-server linux-pam)) + (list libfido2 linux-pam openssl)) (native-inputs - (list autoconf automake libtool asciidoc pkg-config)) + (list asciidoc autoconf automake libtool pkg-config)) (home-page "https://developers.yubico.com/pam-u2f/") (synopsis "PAM module for U2F authentication") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 3/8] gnu: sendmail: Update to 8.18.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845615938 (code B ref 74035); Tue, 05 Nov 2024 23:15:02 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:16 +0000 Received: from localhost ([127.0.0.1]:38363 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Ska-00048t-1u for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:16 -0500 Received: from 14.mo561.mail-out.ovh.net ([188.165.43.98]:52723) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkY-00048Q-2X for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:15 -0500 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.76]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4Xjkg90Z13z1Rhh for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:13 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-2fkqw (unknown [10.110.188.135]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id B6C711FD66; Tue, 5 Nov 2024 23:14:12 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-2fkqw with ESMTPSA id PRNgDsSmKmdWIAAAOdiAaQ (envelope-from ); Tue, 05 Nov 2024 23:14:12 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R0035b8f53df-6068-4bff-946f-48d5092b1261, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:53 +0100 Message-ID: <20241105231405.21806-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12017011181058712290 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpefgudehvdegieeiieefleekudehtdehteduleefvedviefhkeefkeeiieffheevveenucffohhmrghinhepshgvnhgumhgrihhlrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedumgdpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=pafjSbyWBfLgi+3s2nYnsAzEBTRAYd+jNDlHyBEe9aI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848453; v=1; b=vKgBM9u8bkdh8G8XQoA9/SlBoU6jtkk8ZPRcETrmh/X7/P79ga/sAFQeNR2zJ3zobVeOfAIC 8ruX96rwl/9i0iKeuDHM4FXuhpCjXK/hR+2PYYPrEkbxiJ7O6n/7/X4COjdEuPEv5L7cQLnRUmU AlsOAiT8VeahJsG0wM4yismDTLL68GHl+cnZEnRhMy+YqUk9NFiCGVM0wf17Kacv/W3+oj1kZAs jsBC448AT1xQIT80gW3MjCxe6amam4yO7EHEpunvzL3YSXRysfNJyTZwMc2fRnGXez/zWSgXj+H 8OWLUyqEDmaYLceCWzVsnZMfhlzs+MIEL2U7Wnc49BGUA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. --- gnu/packages/mail.scm | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 2c69a7b818..ca1a55818e 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -3122,7 +3122,7 @@ (define-public mhonarc (define-public sendmail (package (name "sendmail") - (version "8.15.2") + (version "8.18.1") (source (origin (method url-fetch) @@ -3130,8 +3130,7 @@ (define-public sendmail "ftp://ftp.sendmail.org/pub/sendmail/sendmail." version ".tar.gz")) (sha256 - (base32 - "0fdl9ndmspqspdlmghzxlaqk56j3yajk52d7jxcg21b7sxglpy94")))) + (base32 "0w07iw4imp9wvczd2mijns7zxl8p1wk29b9yrzvhcj4fqc4z7wfb")))) (build-system gnu-build-system) (arguments `(#:phases -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 4/8] gnu: openvpn: Update to 2.6.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845815959 (code B ref 74035); Tue, 05 Nov 2024 23:15:03 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:18 +0000 Received: from localhost ([127.0.0.1]:38369 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skc-00049K-Eu for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:18 -0500 Received: from 4.mo576.mail-out.ovh.net ([46.105.42.102]:49619) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkY-00048d-W8 for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:15 -0500 Received: from director6.ghost.mail-out.ovh.net (unknown [10.109.176.96]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4Xjkg95tyzz1vd5 for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:13 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-vzmp8 (unknown [10.110.164.45]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 9D4931FD4D; Tue, 5 Nov 2024 23:14:13 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-vzmp8 with ESMTPSA id a4BoHsWmKmdFEQAA3/JB9g (envelope-from ); Tue, 05 Nov 2024 23:14:13 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G005f58add06-c316-410f-a236-b117245ec7f6, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:54 +0100 Message-ID: <20241105231405.21806-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12017011181043507938 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeelffejteeutefhfeekfffffedvudekjeekgfeludeitdfhkeevhfeivdfhffeggeenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiegmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=0LEHvRvyTCXad2YSHo4l/HLEPV68T9gyWkeXTnK7aUg=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848454; v=1; b=S67T2G216RKV5Lr95RfzpyUDeHScwZehf0pdJ7mk2jU85ZpI7yn5mXvutV8/ie3vYmB6S3TF 6BhNdOU3fnfNZonWnrY8pYY5iRRTVwykPNo3VtyGmueNPIADnHe9ehThneQ0Dnqp2vmTFvON5E1 XtFH56vS9wCwTHDWnPrY47IWb8WDiODwpNSya8n3qhQnH9gpoP8lbD+Reokgg4Ery1xu/+OS/VD rkQ9GI52yB65IuC7tIu2898+prvPH6pSZlPMTNkKKMdZY663sMwdFJzUq9pZ3HiAYKbeteAY9aa 1PuMezIRVZCj4UlcrfMzentWDWCojNOhac+sahkQIx+KQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thix fixes CVE-2024-24974, CVE-2024-27459 and CVE-2024-27903. * gnu/packages/vpn.scm (openvpn): Update to 2.6.12. --- gnu/packages/vpn.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/vpn.scm b/gnu/packages/vpn.scm index 9f36595bfd..193b247779 100644 --- a/gnu/packages/vpn.scm +++ b/gnu/packages/vpn.scm @@ -867,7 +867,7 @@ (define-public openfortivpn (define-public openvpn (package (name "openvpn") - (version "2.6.7") + (version "2.6.12") (source (origin (method url-fetch) (uri (string-append @@ -875,7 +875,7 @@ (define-public openvpn version ".tar.gz")) (sha256 (base32 - "04wr0g97nmv81javym8r99mglmb86v1i49xmnmzf938x1cs7g67f")))) + "0a8r3bvg4aic9b7dix0h7990g3j1gq17wd3w6vqk8vk8xgfhyq8w")))) (build-system gnu-build-system) (arguments '(#:configure-flags '("--enable-iproute2=yes"))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 5/8] gnu: youtube-dl: Deprecate package. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845915967 (code B ref 74035); Tue, 05 Nov 2024 23:15:03 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:19 +0000 Received: from localhost ([127.0.0.1]:38373 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skc-00049M-Qw for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:19 -0500 Received: from 20.mo581.mail-out.ovh.net ([46.105.49.208]:33829) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8SkZ-00048e-Vu for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:16 -0500 Received: from director5.ghost.mail-out.ovh.net (unknown [10.108.17.76]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XjkgB3L9Sz1Jsw for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:14 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-45hdz (unknown [10.110.164.45]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 400021FDF0; Tue, 5 Nov 2024 23:14:14 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-45hdz with ESMTPSA id JuW6B8amKmeVQgIAioFHlw (envelope-from ); Tue, 05 Nov 2024 23:14:14 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G005c15a2e5c-3cee-44ab-a71d-e551d8391954, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:55 +0100 Message-ID: <20241105231405.21806-5-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12017292658021491426 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeelffejteeutefhfeekfffffedvudekjeekgfeludeitdfhkeevhfeivdfhffeggeenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekudgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=He0mlwKWr5nnOb0EspcF1EB9CaxEO9fmT1uGdz3tGmo=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848454; v=1; b=L7C8rpCLQ/0SuLjhZgOaCEmxEEvv4p23vMRHQtNWiUyK3nyoAPvll1d/8sX1oQS6+gOruhT3 63zpoIy5JhFvtDyN58z9BHwU72+8E028MaLcVfq9eA+xLlJVvOWy0M9W5mE931KbEz+BtTU7gNj pV3oCi4EsiSoF39pFDV42ZtMsFkLJmLF/r+6j37F4mlZwuy8kEufoMh6E3q/nmePp7FSvXv5hvB ZXYGmloqJUoX4ZRbAs+ZKSuQCFcVdYm11it5Qgi4MUGOdxLadl9Kqy5WpiWpQkReXWK6Ao7tMfF eN6ZY8NS6CjyeS49wvMT5n1DmtEWVjC477+IyWZQQ0R+w== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This package is not developped anymore. * gnu/packages/video.scm (youtube-dl): Deprecate package. --- gnu/packages/video.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm index ff5dcd8daa..74cfabf6e7 100644 --- a/gnu/packages/video.scm +++ b/gnu/packages/video.scm @@ -93,6 +93,7 @@ (define-module (gnu packages video) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix utils) #:use-module (guix packages) + #:use-module (guix deprecation) #:use-module (guix download) #:use-module (guix gexp) #:use-module (guix git-download) @@ -3085,7 +3086,7 @@ (define-public yle-dl video streaming services of the Finnish national broadcasting company Yle.") (license license:gpl3+))) -(define-public youtube-dl +(define-deprecated/public youtube-dl #f (package (name "youtube-dl") (version "2021.12.17") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 6/8] gnu: unicorn: Update to 2.1.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084845915979 (code B ref 74035); Tue, 05 Nov 2024 23:15:04 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:19 +0000 Received: from localhost ([127.0.0.1]:38375 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skd-00049U-91 for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:19 -0500 Received: from 1.mo576.mail-out.ovh.net ([178.33.251.173]:39889) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Ska-00048r-Vq for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:18 -0500 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.17.76]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XjkgC53VPz1pl8 for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:15 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-5pt2d (unknown [10.108.54.212]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 665AA1FDF0; Tue, 5 Nov 2024 23:14:15 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-5pt2d with ESMTPSA id rzBmOMamKmfBVAIARTw1CA (envelope-from ); Tue, 05 Nov 2024 23:14:15 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001cf35363b-267a-47b7-855a-c680748046a9, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:56 +0100 Message-ID: <20241105231405.21806-6-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12017574132913398498 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedttdejfeffgeeitdfhveeuudejtdffffeufeefkedvudehleeltedtvdffiefgleenucffohhmrghinhepuhhnihgtohhrnhdqvghnghhinhgvrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiegmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=MuQFZQbEBKTGfqy1DzhCyVd+c8xzDEBmFMZXC+f8L3o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848455; v=1; b=JrVFV816q4v4F4ZcG3szRjHSQb5i2if7d939AGZjaRBL+oKLxndjfsTE+v/efELZImruoxJS 0qpM6ypZIhHbUxmQWDSbwuRFxH38Gf1BnpNWh2Kg6MKak7326UVEoQ+xlZYlK60B41CgFLly4KF lfE4H1TGKO0RPv2qRP7uY/ZI91ytTEpcOVQroxPOQqWtYxAmi2qieOFiF4JFYLjA5SI0Uw7l4RM +iCQB+kg70iLrP8u169ndYqbuG2fxnj2w5mcpK6iGVZcrPINTXtP7izVyZZxTXjeKkFwxMpFYIp pW15UT0/kWTYtBHg1ERxt2nUhkTHQBfWsTKPNA8r0Wu1Q== X-Spam-Score: 0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) Thix fixes CVE-2021-4296. * gnu/packages/emulators.scm (unicorn): Update to 2.1.1. --- gnu/packages/emulators.scm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/gnu/packages/emulators.scm b/gnu/packages/emulators.scm index f0a60c0b49..948e588c4c 100644 --- a/gnu/packages/emulators.scm +++ b/gnu/packages/emulators.scm @@ -3508,13 +3508,18 @@ (define-public zsnes (define-public unicorn (package (name "unicorn") - (version "2.0.1.post1") + (version "2.1.1") (source (origin (method url-fetch) (uri (pypi-uri name version)) (sha256 - (base32 "0mlfs8qfi0clyncfkbxp6in0cpl747510i6bqymwid43xcirbikz")))) + (base32 "18sbrycr62wcs3a68a9q76ihpahfsd4bn3mryvyhimwwn1342kwh")) + (modules '((guix build utils))) + ;; cmake files are not in the cmake dir in pypi + (snippet #~(substitute* "src/CMakeLists.txt" + (("include\\(cmake/") + "include("))))) (build-system pyproject-build-system) (native-inputs (list cmake pkg-config)) (home-page "https://www.unicorn-engine.org") -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 7/8] gnu: Add sexpp. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084846315998 (code B ref 74035); Tue, 05 Nov 2024 23:15:04 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:23 +0000 Received: from localhost ([127.0.0.1]:38379 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skg-00049w-St for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:23 -0500 Received: from 4.mo582.mail-out.ovh.net ([87.98.184.159]:60251) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skc-00049D-IK for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:19 -0500 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.2.89]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XjkgF2MQ0z1QjP for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:16 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-n5dl8 (unknown [10.111.174.226]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8A7771FD9E; Tue, 5 Nov 2024 23:14:16 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-n5dl8 with ESMTPSA id zT1ED8imKmfemT4AQqw1xQ (envelope-from ); Tue, 05 Nov 2024 23:14:16 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R00312f36bee-2f6c-444b-a967-8710e6936d30, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:57 +0100 Message-ID: <20241105231405.21806-7-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12017855608326972130 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhggtgfgsehtkeertdertdejnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdffheegkefhkefggfelheffteeigfegiedtudetkeffhfekheevjeefjeeltdeinecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddttdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvdgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=U92cQpcMIFFvtafY+xePsreR0YecBHq4Z2qiMxsXF34=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848457; v=1; b=pAgLCJT8JTfLx93uTiUNWO4tinx6mRMoX+LvDWqEiMCqGvdoh+Tfe2Pb3J9Q/nTJfl63CJRL bWQQqErLySyBos46Er526G5lBTeNxDST9WvFFurf7oyOKgpqF7IqIvHGV10jNVXoS6QJtbjmjos AyueML7pBjVni0sRWmFkJ/hUMnlCNg9pFr7W2duOUoZmaU/eoehFQpWLStVdu3pv/adknAl7ZCc 42gcvWkBx6xIh4BrU5tGb7/QHCHghgqcHyk+jNUpoGatG+ix6a2PoYuHd9hAF6FEif3IiBBlkA2 ELiCCoxKkgMCJRT7byNaSdpNPAaVeFyn4Bzs5+PWsRBVw== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/packages/openpgp.scm (sexpp): New variable. --- gnu/packages/openpgp.scm | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 9b6f04b407..356908ab1f 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -1,5 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2020 Justus Winter +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -157,3 +158,26 @@ (define-public rnp license:asl2.0 ;; Nominet UK's BSD 3-Clause License (netpgp). license:bsd-3))))) + +(define-public sexpp + (package + (name "sexpp") + (version "0.9.0") + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://github.com/rnpgp/sexpp") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) + (sha256 + (base32 "16y9f42w6ay3w0s23xmigqm0qi1swdfvc93g2xn3xkg1r4kpmnwq")))) + (build-system cmake-build-system) + (arguments + (list #:configure-flags '(list "-DDOWNLOAD_GTEST=off"))) + (native-inputs (list googletest pkg-config)) + (home-page "https://github.com/rnpgp/sexpp") + (synopsis "C++ library for S-expressions") + (description + "This package provides a C++ library for working with S-Expressions.") + (license license:expat))) -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 05 Nov 2024 23:15:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173084846316004 (code B ref 74035); Tue, 05 Nov 2024 23:15:05 +0000 Received: (at 74035) by debbugs.gnu.org; 5 Nov 2024 23:14:23 +0000 Received: from localhost ([127.0.0.1]:38381 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skh-00049z-Ay for submit@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:23 -0500 Received: from 16.mo583.mail-out.ovh.net ([87.98.174.144]:52383) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8Skf-00049o-FP for 74035@debbugs.gnu.org; Tue, 05 Nov 2024 18:14:22 -0500 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XjkgJ2svFz1TP3 for <74035@debbugs.gnu.org>; Tue, 5 Nov 2024 23:14:20 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-kkz47 (unknown [10.110.164.78]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id ED0BD1FDF0; Tue, 5 Nov 2024 23:14:19 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-kkz47 with ESMTPSA id TtXRLsumKmdjPgIA8j75dQ (envelope-from ); Tue, 05 Nov 2024 23:14:19 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002ee51fbde-25b7-46fb-a5ee-a1aa30e4353d, 7DA11F85E05AC71F4B07BAB71687C1137F5318AF) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves Date: Wed, 6 Nov 2024 00:13:58 +0100 Message-ID: <20241105231405.21806-8-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241105231405.21806-1-ngraves@ngraves.fr> References: <20241105231405.21806-1-ngraves@ngraves.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 12018981509621801698 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrtddugddtlecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeelffejteeutefhfeekfffffedvudekjeekgfeludeitdfhkeevhfeivdfhffeggeenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefmgdpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ESl+kZ+ZXHMYLkX1kb3CXN6RS7I6+Z/oSRoSul3YtTs=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730848460; v=1; b=OQeEfeLQPkpulB92ez7GLMaIHRtS5/Yi3QfePG0SdiQTNQ7LQ0+xhAuUBKbOTWuOrwmXY0GD vaJ9P7l0vpWU6Q3c/ndQmNUUObKE2gDQ2onuGP3dvmWspN1Mx9c7oA1CEqqs5tQvzEmmZ0pKWWc /NqhR8FUvByklU5xAxQDIIMiIR9xRo141Yp7DJkIjIPtH1QSSmfbYoZ77NEaNGaW/D9fPyxY5/d MdUy3JZCjM1gQBZH/d/j3u9sZqAjEETO6LOehXNvCGULZPLKIZevNktsVp93F9/I5CDoFB2VjTF 8xWo+PLqoCyfYVeIANIeUpAQZBSKr/LAlAq1HFL99eD/g== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This fixes CVE-2023-29479 and CVE-2023-29480. * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. [arguments]: Improve style using gexps. <#:phases>: Add phase 'inject-sexpp-source. [inputs]: Add sexpp. --- gnu/packages/openpgp.scm | 52 +++++++++++++++++++++++----------------- 1 file changed, 30 insertions(+), 22 deletions(-) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 356908ab1f..baf786c5ee 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -23,6 +23,7 @@ (define-module (gnu packages openpgp) #:use-module (guix git-download) #:use-module (guix build-system cmake) #:use-module (guix build-system gnu) + #:use-module (guix gexp) #:use-module ((guix licenses) #:prefix license:) #:use-module (gnu packages) #:use-module (gnu packages check) @@ -98,10 +99,10 @@ (define-public dkgpg (license license:gpl2+))) (define-public rnp - (let ((day-of-release "2022-09-22")) + (let ((day-of-release "2024-05-14")) (package (name "rnp") - (version "0.16.2") + (version "0.17.1") (source (origin (method git-fetch) (uri (git-reference @@ -110,33 +111,40 @@ (define-public rnp (file-name (git-file-name name version)) (sha256 (base32 - "13z5kxm48a72w4m2crwgdjdng4a4pwxsd72r2z3a4pcakfp2swi8")))) + "052872b6a88vkcc58alxcm532y6dra5qqd997jga41v72h3pnj4d")))) (build-system cmake-build-system) - (arguments `(#:configure-flags - '("-DBUILD_SHARED_LIBS=on" - "-DBUILD_TESTING=on" - "-DDOWNLOAD_GTEST=off" - "-DDOWNLOAD_RUBYRNP=off") - #:phases - (modify-phases %standard-phases - (add-after 'unpack 'patch-tests - (lambda _ - (substitute* "src/tests/support.cpp" - (("\"cp\"") (search-input-file inputs "/bin/cp"))))) - (replace 'check - (lambda* (#:key tests? #:allow-other-keys) - (when tests? - ;; Some OpenPGP certificates used by the tests expire. - ;; To work around that, set the time to roughly the - ;; release date. - (invoke "faketime" ,day-of-release "make" "test"))))))) + (arguments + (list + #:configure-flags + ''("-DBUILD_SHARED_LIBS=on" + "-DBUILD_TESTING=on" + "-DDOWNLOAD_GTEST=off" + "-DDOWNLOAD_RUBYRNP=off") + #:phases + #~(modify-phases %standard-phases + (add-after 'unpack 'patch-tests + (lambda _ + (substitute* "src/tests/support.cpp" + (("\"cp\"") (search-input-file inputs "/bin/cp"))))) + (add-after 'unpack 'inject-sexpp-source + (lambda _ + (rmdir "src/libsexpp") + (symlink #$(package-source (this-package-input "sexpp")) + "src/libsexpp"))) + (replace 'check + (lambda* (#:key tests? #:allow-other-keys) + (when tests? + ;; Some OpenPGP certificates used by the tests expire. + ;; To work around that, set the time to roughly the + ;; release date. + (invoke "faketime" #$day-of-release "make" "test"))))))) (native-inputs (list gnupg ; for tests googletest ; for tests libfaketime ; for tests pkg-config python)) - (inputs (list botan bzip2 json-c zlib)) + (inputs (list botan bzip2 json-c sexpp zlib)) (synopsis "RFC4880-compliant OpenPGP library written in C++") (description -- 2.46.0 From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 20/26] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 06 Nov 2024 16:11:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Zheng Junjie Cc: ngraves@ngraves.fr, 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173090941529406 (code B ref 74035); Wed, 06 Nov 2024 16:11:01 +0000 Received: (at 74035) by debbugs.gnu.org; 6 Nov 2024 16:10:15 +0000 Received: from localhost ([127.0.0.1]:45217 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8ibn-0007eD-1A for submit@debbugs.gnu.org; Wed, 06 Nov 2024 11:10:15 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46286) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t8ibk-0007a8-Ec for 74035@debbugs.gnu.org; Wed, 06 Nov 2024 11:10:13 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t8ibd-0005Gd-Sy; Wed, 06 Nov 2024 11:10:05 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=0Xa5rw9GfS2YhOiXY1UkPRACFO5kcKiJwhBzc39lBnc=; b=Ljq6iyCB4k7jd2coWEqJ t7fB/qGSwV10lBcKpvWDki3XnIBb9UgNPcAnJZbXVIlUjAcBAwE8IMIPHaVx0aMEOCs2kAqDMK2zP YfWOTDywP8ySmb1batvWMaXd+xt+mgcxtYtoR8FL867qvbipmETW3deygDdGagYbo8HcT0zBC8EzE seOSo+xAI917WASIGcju1y5w0hh75S83iUl0r/DvAKUfWQkkpEZB++N+R9cL+UzGtoW1KeG8Fo5GK NcQrBImCUz2StZxu2jLxOPXrRttEs+8VdlVNgKBlu5iNYcbetOvnw7bVVe9DKzmWa1LEizSny7630 rTX3SwTkx/S6FA==; From: Ludovic =?UTF-8?Q?Court=C3=A8s?= In-Reply-To: <87plnbqkgu.fsf@iscas.ac.cn> (Zheng Junjie's message of "Mon, 04 Nov 2024 19:58:25 +0800") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-20-ngraves@ngraves.fr> <87plnbqkgu.fsf@iscas.ac.cn> Date: Wed, 06 Nov 2024 17:09:59 +0100 Message-ID: <87ed3owdgo.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Zheng Junjie skribis: > Nicolas Graves via Guix-patches via writes: > >> This fixes CVE-2022-26981. >> >> * gnu/packages/language.scm (liblouis): Update to 3.31.0. >> [arguments]: Improve style using gexps. >> [native-inputs]: Rewrite and replace python-wrapper by python. [...] > apply, adjust message and use python-minimal, not python. Apparently this broke liblouisutdml: . Many test failures like this: --8<---------------cut here---------------start------------->8--- warning: lou_getDataPath is deprecated. ../../lbu_files/wiskunde.ctb:43: warning: class is deprecated, use attribut= e instead ../../lbu_files/wiskunde.ctb:44: warning: class is deprecated, use attribut= e instead ../../lbu_files/wiskunde.ctb:45: warning: class is deprecated, use attribut= e instead ../../lbu_files/wiskunde.ctb:46: warning: class is deprecated, use attribut= e instead ../../lbu_files/wiskunde.ctb:47: warning: class is deprecated, use attribut= e instead ../../lbu_files/wiskunde.ctb:49: warning: class is deprecated, use attribut= e instead unicode.dis,../../lbu_files/wiskunde.ctb,braille-patterns.cti: 6 warnings i= ssued warning: lou_getDataPath is deprecated. FAIL test_mathml_woluwe/test_045.test (exit status: 1) --8<---------------cut here---------------end--------------->8--- Ludo=E2=80=99. From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v2 20/26] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Z572 Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 07 Nov 2024 11:22:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 74035@debbugs.gnu.org, ngraves@ngraves.fr Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.17309785118381 (code B ref 74035); Thu, 07 Nov 2024 11:22:02 +0000 Received: (at 74035) by debbugs.gnu.org; 7 Nov 2024 11:21:51 +0000 Received: from localhost ([127.0.0.1]:47380 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t90aE-0002B7-Q4 for submit@debbugs.gnu.org; Thu, 07 Nov 2024 06:21:51 -0500 Received: from smtp81.cstnet.cn ([159.226.251.81]:58482 helo=cstnet.cn) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t90aC-0002Ar-Gw for 74035@debbugs.gnu.org; Thu, 07 Nov 2024 06:21:50 -0500 Received: from m (unknown [107.174.64.25]) by APP-03 (Coremail) with SMTP id rQCowAD33+a7oixnoTPCAA--.16545S2; Thu, 07 Nov 2024 19:21:36 +0800 (CST) From: Z572 In-Reply-To: <87ed3owdgo.fsf@gnu.org> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Wed, 06 Nov 2024 17:09:59 +0100") References: <20241103160239.6772-1-ngraves@ngraves.fr> <20241103160239.6772-20-ngraves@ngraves.fr> <87plnbqkgu.fsf@iscas.ac.cn> <87ed3owdgo.fsf@gnu.org> Date: Thu, 07 Nov 2024 19:21:25 +0800 Message-ID: <87zfmbxpai.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: rQCowAD33+a7oixnoTPCAA--.16545S2 X-Coremail-Antispam: 1UD129KBjvJXoW7WrW3Ww13ZryrurW3ZFWUurg_yoW8WF4Dpa 9xJr12qF4Fyw1Dtws2vr4fXFy3Krn8Ja17JF1aqrn7JF4jv3WfXF43Cw1rurW7JrWUZ34q yw1UJ347Gr1xZFJanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvlb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_JFI_Gr1l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Cr0_Gr1UM28EF7xvwVC2z280aVAFwI0_Cr1j6rxdM28EF7xvwV C2z280aVCY1x0267AKxVW0oVCq3wAa7VASzI0EjI02j7AqF2xKxVCjxxvEa2IrM2AIxVAI cxkEcVAq07x20xvEncxIr21le4C267I2x7xF54xIwI1l5I8CrVACY4xI64kE6c02F40Ex7 xfMcIj6xIIjxv20xvE14v26r106r15McIj6I8E87Iv67AKxVWUJVW8JwAm72CE4IkC6x0Y z7v_Jr0_Gr1lF7xvr2IY64vIr41l42xK82IYc2Ij64vIr41l4I8I3I0E4IkC6x0Yz7v_Jr 0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWwC2zVAF1VAY 17CE14v26r1Y6r17MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcV C0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY 6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBIdaVFxhVjvj DU0xZFpf9x07jt4SwUUUUU= X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s writes: > Hi, > > Zheng Junjie skribis: > >> Nicolas Graves via Guix-patches via writes: >> >>> This fixes CVE-2022-26981. >>> >>> * gnu/packages/language.scm (liblouis): Update to 3.31.0. >>> [arguments]: Improve style using gexps. >>> [native-inputs]: Rewrite and replace python-wrapper by python. > > [...] > >> apply, adjust message and use python-minimal, not python. > > Apparently this broke liblouisutdml: > . > > Many test failures like this: > > --8<---------------cut here---------------start------------->8--- > warning: lou_getDataPath is deprecated. > ../../lbu_files/wiskunde.ctb:43: warning: class is deprecated, use attrib= ute instead > ../../lbu_files/wiskunde.ctb:44: warning: class is deprecated, use attrib= ute instead > ../../lbu_files/wiskunde.ctb:45: warning: class is deprecated, use attrib= ute instead > ../../lbu_files/wiskunde.ctb:46: warning: class is deprecated, use attrib= ute instead > ../../lbu_files/wiskunde.ctb:47: warning: class is deprecated, use attrib= ute instead > ../../lbu_files/wiskunde.ctb:49: warning: class is deprecated, use attrib= ute instead > unicode.dis,../../lbu_files/wiskunde.ctb,braille-patterns.cti: 6 warnings= issued > warning: lou_getDataPath is deprecated. > FAIL test_mathml_woluwe/test_045.test (exit status: 1) > --8<---------------cut here---------------end--------------->8--- > > Ludo=E2=80=99. please try https://issues.guix.gnu.org/74238=20 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcsorUACgkQO1qpk+Gi 3/D6UxAAgj+9kBiDy5JCwRZkXoYfsvU32HofhHvMV3JY/yMgAqvaxs1Hl2KPnCas JV0Eg5MB3Ay9FFAWVky5ZsIPaHJn2jjjAC/tys5lg/qOiHUyW1/ZWjSpI/DVzOj/ Me6KoLQd3GI4OvIST6Tw/kBhQHei86dtc+qiB7k0zqbmJ19wq4NesGDpX43jLxE5 Wwavet5Cdj3hUWOW0ekeAQG44+rQGQcwwVTPCitBD8BzAYhk0HGNhYckrGsF7XB6 Jc8lKpdtSQZ3VF39W9RR0gaU+sM3+2MLMIo8xmbSLy1RjUihn6JJnTAUE+erD3+8 o0bKdyk/EVpHtVZ0badFpPfIqgtahv1enwoI+CI7hcitVnNKfJnt1NHGl+f9Tx9y lvY4D0FnoE2DuMOiaLNueSUjTUsxqj1CLXs8BHQL2tJTOdXMjOElFMHsibqn5ckZ Rx7WOCiYXo47A6FuYdROXKF+dkF58PG2nRyGw51Ph6K/xjBoH7LcZ53Wxcx7sR5y CwPGLES2B9rPtG/XHev32jYdj3Z9OlVcb5nnwIJZ8nQX0uINZumzG9zT0pUYcH3C QKSBzE9RMsg1XomCwTmZ85ywFh+RkySq3aAft45I4T5NWvZNcn4EiIQ6qpu33yi0 fq5q77qxfW5x8zbrz647l9KNGsa2lLCynazPFxw2UMLXkTJ/Smw= =GonE -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 1/8] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 11:49:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Nicolas Graves Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173132570415277 (code B ref 74035); Mon, 11 Nov 2024 11:49:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 11:48:24 +0000 Received: from localhost ([127.0.0.1]:58501 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tASu7-0003yK-Sa for submit@debbugs.gnu.org; Mon, 11 Nov 2024 06:48:24 -0500 Received: from mail-pl1-f174.google.com ([209.85.214.174]:58523) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tASu4-0003yB-GW for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 06:48:21 -0500 Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-21145812538so40875405ad.0 for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 03:48:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1731325639; x=1731930439; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=zAxlOTXjOI8j4+rSaZuq1zmnsUaOd32rT5Mb0bIcASQ=; b=UllNWBjIFQsYH0qt1NkqqHvYzbJkaDE6Egr033LC1BiBIIrqW1cHS8jl2m23yb1dc9 fhVDWryZYo/EMlmTijNu4XsQCuld8wwIGEXNRTkSUuHkpLozEawgbvvkMowXcTellhf2 PLBU5dY4VzY9kEfxQAZbRM/0/pFp7LaukpsSHCKa/jwgMi4sNOfNHpuLFa90CdvxvtCm gq5PztaDrYdEUWR+vfLBZ8OhMES75f/ivKpQzLYvNPECY+nhlQHZaMFuJFMRuSxyvY9y PNxt5KsUsUYNztSpYdgn1CLKqpoLvHWThORIEwmX+LhYXO/+tq+LBKGkDDfWydSlUHcN 9q0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731325639; x=1731930439; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=zAxlOTXjOI8j4+rSaZuq1zmnsUaOd32rT5Mb0bIcASQ=; b=K0AMt8L4MmnEtTZ2liT1xAAZ4jkGHc2CWXRJfbtJHcloTIsrFv2FrNHuycaArhm6j6 ZNSp7sQcnv2T7iFhVpddr4SBnq4jakQX/wCFVDNr9O3x3g1P5dY4+E1n65sI+qhjaxAw LbW7sic6E+ZKLFtHwqEPDXgpW3HCGaT4xZEO1QUg653u+94Y2HEumaTg7tt30U0briuB e3pweuI4XfJSt5uGVlMHXlgXnRKyySx07vK+qHpmhUJnu1/sukDj//PEpT4za8Afukce wJxMQMolb4yZCMQG5Fh8XKTGXpK54KlHlUDEmEwmil+HWvPzxIv9xFJrlQGq6LTndw9N HuQA== X-Gm-Message-State: AOJu0YzyUfI2tk3KcDApi+yKpFzfrqS3FbHeTitMxVWxlMLD2nxB1BSl 6ydWWc39ZGJZZ4q6XkzVzvlmzgEDF9Gj8vOW+r1rbLORnd44wMh8MakWqYxV X-Google-Smtp-Source: AGHT+IHNTMtrsi4Q8rLaQCwkYC3/1c6bVO7B0aby8pdyWc2jxUrVVAuVyAxVl8DT15UouOCivcstog== X-Received: by 2002:a17:902:d4c6:b0:211:6b67:10ea with SMTP id d9443c01a7336-21183c4335cmr162381845ad.8.1731325639064; Mon, 11 Nov 2024 03:47:19 -0800 (PST) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-21177e85f97sm74098585ad.278.2024.11.11.03.47.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 11 Nov 2024 03:47:18 -0800 (PST) From: Maxim Cournoyer In-Reply-To: <20241105231336.21640-1-ngraves@ngraves.fr> (Nicolas Graves's message of "Wed, 6 Nov 2024 00:13:24 +0100") References: <20241026223238.26667-1-ngraves@ngraves.fr> <20241105231336.21640-1-ngraves@ngraves.fr> Date: Mon, 11 Nov 2024 20:47:12 +0900 Message-ID: <87r07i9em7.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Nicolas Graves writes: > This fixes bart reproducibility and CVE-2022-45387. CVE-2022-45387 is about the Jenkins bart plugin, not this BART toolbox software; so it's nice to update it but there's no CVE fix here. -- Thanks, Maxim From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 5/8] gnu: youtube-dl: Deprecate package. Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 11:50:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Nicolas Graves Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173132578715400 (code B ref 74035); Mon, 11 Nov 2024 11:50:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 11:49:47 +0000 Received: from localhost ([127.0.0.1]:58505 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tASvT-00040J-8C for submit@debbugs.gnu.org; Mon, 11 Nov 2024 06:49:47 -0500 Received: from mail-pl1-f180.google.com ([209.85.214.180]:60481) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tASvQ-00040B-FP for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 06:49:45 -0500 Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-20c805a0753so41827665ad.0 for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 03:49:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1731325723; x=1731930523; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=VvmbMUO7DTRxSEWMJ3wXi4mn/BURuMlWlOP9I5qVYEY=; b=PwiMz+5EDEYf+y/+80fAWB4r03hzDghI9YCzu8YlcmyyOKM5OsPFFt3aUiXpbx9Mf8 /IF/0FX4cDxmuFyN7LpbwgYmNKY6KnZZfufEiHvPY2wP9y10c8E3av4GzF2rzALdchNb oUsXJ0f+imvi6I3M8jRgc+jacOFQmQBSE5fFEyATBJ0/jugmlRS+ktvgv9OAblIM2TYy ZwGGK5S+BT4y8e/REyiKP/JMBUFRLPSbfJlABn8IQPsUicj/tazou3JWzudSiTi0LYx+ dUzi9wT39rZWTV+QRYjdVaPmbMWrnDZ05DiasGkgLuUaLEV2bFssWR/6sz4u0KigZ0PQ OVlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731325723; x=1731930523; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=VvmbMUO7DTRxSEWMJ3wXi4mn/BURuMlWlOP9I5qVYEY=; b=uT4fKbwzGHphW9SchfCRxeWLzQCW4i7lQA7HpMxkZHWaKqU0QGSMPnqAJ3+8fSdWQd ZJSMMbepzn1nzGjXXBLAqOJTQl2cBZJDNGg7gUHkTgwu7zeVrlr5ubXQ0OXlbog0qyi2 tlglkjch2/JMD+Ahz909yHAUybpF85Ta3qgmQPC4Xhy9xc6x9868a0VI8gMIWHZkA9Lp B8O2tssJ8+D+aPzYDEBTnJEZqnkwcUuqKOgOzmaGEHss7cD9zg6zr0I85E400My1EJxJ /zytPbMBGkAFaW6Vg7S8N789D8Rl2ogu+cnucENaQjQhh+j3COoS+0rATmYeTZzzYR2e vBNA== X-Gm-Message-State: AOJu0YwGjCb1xSITuDLbwloA7WOZHfylw2r2AB948GTTTFtw5oO4ekiB e05zsO6GQMCMWm78viEYLOUs67NajdrSjpAj7GPaFGHNybPlkUubWptyLaa5 X-Google-Smtp-Source: AGHT+IEihp8iHNdYDuPteXMFlWWDeCNCuVljml/MI67QYBVV5QOQxVnfn6C5VQfzUVzGf5b5bwVDkg== X-Received: by 2002:a17:902:db0f:b0:20c:b517:d715 with SMTP id d9443c01a7336-21183d5548dmr180287685ad.25.1731325723332; Mon, 11 Nov 2024 03:48:43 -0800 (PST) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-21177e5af99sm75088695ad.171.2024.11.11.03.48.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 11 Nov 2024 03:48:42 -0800 (PST) From: Maxim Cournoyer In-Reply-To: <20241105231405.21806-5-ngraves@ngraves.fr> (Nicolas Graves's message of "Wed, 6 Nov 2024 00:13:55 +0100") References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-5-ngraves@ngraves.fr> Date: Mon, 11 Nov 2024 20:48:37 +0900 Message-ID: <87msi69eju.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Nicolas, Nicolas Graves writes: > This package is not developped anymore. > > * gnu/packages/video.scm (youtube-dl): Deprecate package. This is maybe a bit preposterous; the repository is still alive, last touched in August of this year [0]. [0] https://github.com/ytdl-org/youtube-dl I've dropped this commit from my locally queued series. -- Thanks, Maxim From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 13:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Nicolas Graves Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173133093330529 (code B ref 74035); Mon, 11 Nov 2024 13:16:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 13:15:33 +0000 Received: from localhost ([127.0.0.1]:58639 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAUGT-0007wK-2N for submit@debbugs.gnu.org; Mon, 11 Nov 2024 08:15:33 -0500 Received: from mail-oi1-f175.google.com ([209.85.167.175]:52286) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAUGQ-0007wC-Tk for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 08:15:31 -0500 Received: by mail-oi1-f175.google.com with SMTP id 5614622812f47-3e5f6e44727so2831915b6e.0 for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 05:15:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1731330870; x=1731935670; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=74SDZ5jiDGZRMK7R9qz8pydmovId5+zWGjGD9D9vBGg=; b=Ulmk8ccCDrcKB5uNoPVPu+Jz95PzV1+RyeFgTIkXA3BC+I+7maL19uoe3IacS8kUsn n4WWPwwenzdrXnhQP37j+/YTtG74HFGyFg4IDu4Wi7vSmsoYMBZcMXzrhk84J5jKo0KK ntGpKIlq8QToOC0o9+l/1antA4PRswryMCgB98VeaKAHO2FsQyzMSo5P6LvtD0+yMliw lS0Sf2ANl72iNdw9LdvoGqrRmUzUAFqnGWA6vH7bVR1mm3k4ahIZX7XUmlvYsPLTEBEn eCx4ocVWtIVobyhpHvJ95+9uoPbiyivXMRiIiLBlJS8RU01ZNlrYA9fkqnrdU1pM6z6S u7rQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731330870; x=1731935670; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=74SDZ5jiDGZRMK7R9qz8pydmovId5+zWGjGD9D9vBGg=; b=hcq9hDmx4rFNXg2CtX6zZdTgV8fFK6kduxS0wUKV/6EzbWu6uparMgYN/0IMsiIns8 x2rKVqc6XecJuNhKs76xXyVJrJRJgON9HeAKKg4ynkjfeg7JZ1nCiEWVD9Prmd3lMdB8 /SKoGCP7Jp3qLKD8bzsErquT0PX3vM3q7bKXWgSeS8QMbLL2OE6zftKvTOq7z9NNLast 3jWEnc6Guwktk26twFdC31H5g7SEn1nhkcaIYiwu9Cu3hmlpANnoOEC2g1M2UjuBka/Y +uKLszkk1NmH4WGaFnODbozF/sxnL7iv8FXPAlJW3U++hDbybeZmTEK1R+vjGxUCl0Ho psLQ== X-Gm-Message-State: AOJu0Ywvr1V4Dy2zXhpUoZoqaviNyH49heD2VVVah+8NvEXa78u8jHHP oKiFOEBA+BUinfizJOB6+a+Ce9snTSMVFNad3RT5oEMY+HuwaLLpZSamlQ== X-Google-Smtp-Source: AGHT+IEgdhhmZqaPxZ8jKsvFTpfxpWCEDD95lt2+U6XW7lJ6rqtDldMQmqRtq+5H/WU9grLa9iBH/A== X-Received: by 2002:a05:6870:6787:b0:270:172c:32ae with SMTP id 586e51a60fabf-2956026f541mr9952169fac.32.1731330869540; Mon, 11 Nov 2024 05:14:29 -0800 (PST) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-7f43b4dd027sm4726930a12.21.2024.11.11.05.14.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 11 Nov 2024 05:14:28 -0800 (PST) From: Maxim Cournoyer In-Reply-To: <20241105231405.21806-8-ngraves@ngraves.fr> (Nicolas Graves's message of "Wed, 6 Nov 2024 00:13:58 +0100") References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-8-ngraves@ngraves.fr> Date: Mon, 11 Nov 2024 22:14:23 +0900 Message-ID: <875xotap5c.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Nicolas Graves writes: > This fixes CVE-2023-29479 and CVE-2023-29480. > > * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. > [arguments]: Improve style using gexps. > <#:phases>: Add phase 'inject-sexpp-source. > [inputs]: Add sexpp. This one fails its test suite for me: --8<---------------cut here---------------start------------->8--- Start 15: rnp_tests.s2k_iteration_tuning 16/263 Test #15: rnp_tests.s2k_iteration_tuning ................................................***Failed 8.02 sec [...] The following tests FAILED: 15 - rnp_tests.s2k_iteration_tuning (Failed) --8<---------------cut here---------------end--------------->8--- It should probably be repoted upstream. -- Thanks, Maxim From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 5/8] gnu: youtube-dl: Deprecate package. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 15:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxim Cournoyer Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173133855220497 (code B ref 74035); Mon, 11 Nov 2024 15:23:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 15:22:32 +0000 Received: from localhost ([127.0.0.1]:58884 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWFM-0005KV-2p for submit@debbugs.gnu.org; Mon, 11 Nov 2024 10:22:32 -0500 Received: from 9.mo582.mail-out.ovh.net ([87.98.171.146]:49489) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWFI-0005KL-Nq for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 10:22:30 -0500 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.2.78]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XnCw25J0mz17Wm for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 15:22:26 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pz7r4 (unknown [10.110.188.65]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 29A001FE75; Mon, 11 Nov 2024 15:22:25 +0000 (UTC) Received: from ngraves.fr ([37.59.142.97]) by ghost-submission-5b5ff79f4f-pz7r4 with ESMTPSA id nNfaADEhMmep9AAAzNMYSQ (envelope-from ); Mon, 11 Nov 2024 15:22:25 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-97G002b4c061fa-279c-4456-9a90-db1572ea8515, E78387A624BFA7BF6E2855E060885FD238E6A798) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 90.92.117.144 From: Nicolas Graves In-Reply-To: <87msi69eju.fsf@gmail.com> References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-5-ngraves@ngraves.fr> <87msi69eju.fsf@gmail.com> Date: Mon, 11 Nov 2024 16:22:24 +0100 Message-ID: <87o72l6bin.fsf@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain X-Ovh-Tracer-Id: 2391974353126810366 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: -100 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddruddvgdejgecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefhvfevufgjfhffkfggtgesthdtredttddttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpefhgedtjeevtedvgeelieeugfetvedtleeigeeuhfdvjeetjeejffeuvdeiffdtffenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdeltddrledvrdduudejrddugeegpdefjedrheelrddugedvrdeljeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvdgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=CHWj8boSNFzC9PVE+W7yjqvyi8JuC880dXQiFcGetzQ=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1731338546; v=1; b=jlxUatVCDfH8Klg33f5pdufPa0Gaae3Wqg+QqAhIXs4jyd3J9VhOjyL2MHlFKBapilGSkSoa ixSBdn7LxDpj+e+2edQlp6/6IaxqD0PGH+CqMdc+NNrvdO6s2P627wNTj+1HrqGhsdaw68+nfbQ QeR0gmtCgJfVBxqS/xuYMoDEEv4j5ex0L91BgA/5RFDcYbgfW6sSOX3UwjFHMT875tYoxEss6hS NsKucEsai2HHvnEGFG1X7+LZW/92hWhWIjBvlQWueYDSPyc1yPZ9+Dzlfnk3sBXKj18C16iYjwR E6F7a39vM+HV3IZAdUNXr/lG3QP13V2DAEr25504owJNA== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On 2024-11-11 20:48, Maxim Cournoyer wrote: > Hi Nicolas, > > Nicolas Graves writes: > >> This package is not developped anymore. >> >> * gnu/packages/video.scm (youtube-dl): Deprecate package. > > This is maybe a bit preposterous; the repository is still alive, last > touched in August of this year [0]. > > [0] https://github.com/ytdl-org/youtube-dl > > I've dropped this commit from my locally queued series. My bad, I only checked the home-page because I thought development was halted (and basically efforts for that functionality went to yt-dlp instead) for legal reasons. At least the home-page is indeed blocked in France. I haven't tested the package, OK to drop this commit. -- Best regards, Nicolas Graves From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 15:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxim Cournoyer Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173133859420591 (code B ref 74035); Mon, 11 Nov 2024 15:24:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 15:23:14 +0000 Received: from localhost ([127.0.0.1]:58889 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWG2-0005M2-FU for submit@debbugs.gnu.org; Mon, 11 Nov 2024 10:23:14 -0500 Received: from 8.mo561.mail-out.ovh.net ([87.98.172.249]:34247) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWG0-0005Lu-8f for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 10:23:13 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.108.17.95]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XnCwt5Gc9z1R4F for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 15:23:10 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j8lkq (unknown [10.111.182.153]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 18A871FEA7; Mon, 11 Nov 2024 15:23:10 +0000 (UTC) Received: from ngraves.fr ([37.59.142.109]) by ghost-submission-5b5ff79f4f-j8lkq with ESMTPSA id 0svlMF0hMmcg1hAABgfSDw (envelope-from ); Mon, 11 Nov 2024 15:23:10 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-109S003bc57533c-ab7b-4311-9ccb-0df1ecd32557, E78387A624BFA7BF6E2855E060885FD238E6A798) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 90.92.117.144 From: Nicolas Graves In-Reply-To: <875xotap5c.fsf@gmail.com> References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-8-ngraves@ngraves.fr> <875xotap5c.fsf@gmail.com> Date: Mon, 11 Nov 2024 16:23:09 +0100 Message-ID: <87ldxp6bhe.fsf@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain X-Ovh-Tracer-Id: 2404359252480680702 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: -100 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddruddvgdejhecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefhvfevufgjfhffkfggtgesthdtredttddttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeevkeelueejtdehgfffkeelkefhhffftefgvdehkeeluefhheeuleejtdejhfdvgfenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddruddtleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiudgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=V4zjHFM7MPsOG3PuUP23JDlzXWqJLBTDJuiqJH3Nkro=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1731338590; v=1; b=T+KY46Gy0gXKgv/WhR5SDESvJB1kznHr1LtGkbZtusl2kNdBP9f30cks+A64OMEvrrylu+L4 Z5Q/RAYuoozjHD6Ha4/o2/rv4j2b63iRCKXRrMaOWSQjsIO+HGJDVU/g/U7oHyBLBPr0k0ZTgnJ irpGpwqDYOEmCinqHRcqZuWz6dxewHbSTNLKeJxUEg+9v9AC3W4tYe8swQW9BByW94fmQF6h3nm QDQxMVfIb2cVtX5/1QwSL/R+Mli6iDXqL6qo9mK5ns/40+fXGmEopGw4w4ShrcoLLtfY5C2jDPG h4Vxz76DX8ipsbIs3ts1Kk7p10OzVqJEjV8wj1XWtDlHQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On 2024-11-11 22:14, Maxim Cournoyer wrote: > Hi, > > Nicolas Graves writes: > >> This fixes CVE-2023-29479 and CVE-2023-29480. >> >> * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. >> [arguments]: Improve style using gexps. >> <#:phases>: Add phase 'inject-sexpp-source. >> [inputs]: Add sexpp. > > This one fails its test suite for me: > > --8<---------------cut here---------------start------------->8--- > Start 15: rnp_tests.s2k_iteration_tuning > 16/263 Test #15: rnp_tests.s2k_iteration_tuning ................................................***Failed 8.02 sec > [...] > The following tests FAILED: > 15 - rnp_tests.s2k_iteration_tuning (Failed) > --8<---------------cut here---------------end--------------->8--- > > It should probably be repoted upstream. Strange, it worked for me IIRC. Maybe tests are flaky and we should exclude this one? -- Best regards, Nicolas Graves From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 1/8] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 11 Nov 2024 15:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxim Cournoyer Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.173133863420650 (code B ref 74035); Mon, 11 Nov 2024 15:24:02 +0000 Received: (at 74035) by debbugs.gnu.org; 11 Nov 2024 15:23:54 +0000 Received: from localhost ([127.0.0.1]:58893 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWGf-0005N0-Rs for submit@debbugs.gnu.org; Mon, 11 Nov 2024 10:23:54 -0500 Received: from 17.mo561.mail-out.ovh.net ([87.98.178.58]:47443) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAWGd-0005Mp-GY for 74035@debbugs.gnu.org; Mon, 11 Nov 2024 10:23:52 -0500 Received: from director7.ghost.mail-out.ovh.net (unknown [10.109.139.16]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XnCxf3FxRz1R93 for <74035@debbugs.gnu.org>; Mon, 11 Nov 2024 15:23:50 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-2gkmb (unknown [10.110.168.204]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 3B7B51FE5C; Mon, 11 Nov 2024 15:23:50 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-2gkmb with ESMTPSA id TON9B4YhMmeCmSsALo/peQ (envelope-from ); Mon, 11 Nov 2024 15:23:50 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R00635ce2785-e6b6-4119-8579-edeb7ff91c61, E78387A624BFA7BF6E2855E060885FD238E6A798) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 90.92.117.144 From: Nicolas Graves In-Reply-To: <87r07i9em7.fsf@gmail.com> References: <20241026223238.26667-1-ngraves@ngraves.fr> <20241105231336.21640-1-ngraves@ngraves.fr> <87r07i9em7.fsf@gmail.com> Date: Mon, 11 Nov 2024 16:23:49 +0100 Message-ID: <87ikst6bga.fsf@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain X-Ovh-Tracer-Id: 2415618253010100990 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: -100 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddruddvgdejhecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefhvfevufgjfhffkfggtgesthdtredttddttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeevkeelueejtdehgfffkeelkefhhffftefgvdehkeeluefhheeuleejtdejhfdvgfenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddruddtieenucevlhhushhtvghrufhiiigvpedunecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiudgmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=bf3HPS9HoI6RDkGpnR2w21LH3F+ltepRuLwiPCKVpdI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1731338630; v=1; b=BCpgwzfRiw9ut63ymLz+6MDvr5MotuxmR5GmLoAipbvb8wk76v2NuKh05rW2sCWtRwDKJzk4 NDyeRnGPhnM66FOSVRFTPlMMLJiTRd/TfRf6qVDbELlrWFTmqoHpPT9ztDlJgGgP5dlzhdINYvj Y0jv/dJtQ5azdj90hNPPrhP2Oe8a6NkHCHY/iBd04CUNfVoDDxrZOcLEqGvB5+v0l/gwwwf0dHe LGsPg0nyl8rCjleC/AlY3NxfVvXC6bxWtp9KdXa7Jce8opsAgR+1D7kDggE8XAnsQDQrtoyffhK I57ghlE0ctYDsTHJj/ILd08cAk1xbthvkWgwO8+Byv0lQ== X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On 2024-11-11 20:47, Maxim Cournoyer wrote: > Hi, > > Nicolas Graves writes: > >> This fixes bart reproducibility and CVE-2022-45387. > > CVE-2022-45387 is about the Jenkins bart plugin, not this BART toolbox > software; so it's nice to update it but there's no CVE fix here. Indeed, thanks for checking! -- Best regards, Nicolas Graves From unknown Sun Jun 22 00:33:33 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Nicolas Graves Subject: bug#74035: closed (Re: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes]) Message-ID: References: <87jzd84qgr.fsf@gmail.com> <20241026223238.26667-1-ngraves@ngraves.fr> X-Gnu-PR-Message: they-closed 74035 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 74035@debbugs.gnu.org Date: Tue, 12 Nov 2024 11:56:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1731412562-12510-1" This is a multi-part message in MIME format... ------------=_1731412562-12510-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #74035: [PATCH 00/24] [security fixes] for near-leaf packages which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 74035@debbugs.gnu.org. --=20 74035: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D74035 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1731412562-12510-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 74035-done) by debbugs.gnu.org; 12 Nov 2024 11:56:00 +0000 Received: from localhost ([127.0.0.1]:60925 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tApV1-0003FZ-LO for submit@debbugs.gnu.org; Tue, 12 Nov 2024 06:55:59 -0500 Received: from mail-pl1-f172.google.com ([209.85.214.172]:56542) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tApV0-0003FI-2J for 74035-done@debbugs.gnu.org; Tue, 12 Nov 2024 06:55:58 -0500 Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-20cf6eea3c0so52882065ad.0 for <74035-done@debbugs.gnu.org>; Tue, 12 Nov 2024 03:55:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1731412492; x=1732017292; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=+NJqaPo9o/pzAyXR7b34wUlH7UTMwzpUxlGiP+E73eg=; b=T7evhEkG0BaSND9j6gGxu/b9H4NGJa96qnsnZEcpQo3RDK/VjKNkf8nf1At/5QHt3i 08dtw3qnB7TZH/fZzvDlhVf3VuBq3YcNHJ0PdeU/6s1hF+EP/83+w5gG857Wd1iRec3j NJ1YjDe8IoU3Ksv0QzeXHwJidt6ABw6OqVsSZ2FGblULNVmfc3zzxrjxqhwqYiqb2DAU PCJD4o16i7UDmGuv5M9L4xdxmT9wgEFTRhWQBvrM+MFcrlZDo6Arm1Oy3394IGOWkq44 VcEs5laHZWCiIM9dJSRWGAbzErzmLMci1kItNiusnkuHGww2A+vKaMZzyLNVFbQlQEjI H3wQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731412492; x=1732017292; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=+NJqaPo9o/pzAyXR7b34wUlH7UTMwzpUxlGiP+E73eg=; b=lgzqkwKgcYJ3Izdl53FBy/OpnFYCrMCSib/Gz64dsqmdiLMwdQS/B139XpNcZtxgtU WaP/NvkIN1ARw0va+jjvRL/I2WI+xn5WFa3pk+ad/xmeiaqBe2F15ntpt4CYEABqdqj5 UFAp/gSq+DMdKacJLQ7n6qNDeAuVkkFj86774Xqh4esAoa7cELkofmhUjD18f+v5uha1 TE9Y1cl63/a3WiWBignzuO7nTeDKRCZ4MAjJ3VNx4ZUeiACFtAVRMDJAaONAMb1kcszF dPy4L02wBdsjo7uBjTxBz0H6ruuvmdLhM9yzhD7AoPPkIWjcMS3hYXC63kuciQxkBEmJ zD/g== X-Gm-Message-State: AOJu0YykCez9tivSjmN+dLDDgITPYyxLLVez+Sv6OrDk6o+78B4TztYN Z1CbdZzDD6eJMyNM71MkmVdsreV1sqp8eQBzISReQXEdBaS0AwNC9Q5Yc2Xp X-Google-Smtp-Source: AGHT+IG4SHdYpjPzjpTbuLrL1kS20AzvVSb1sIawB+uBWju/Fn5aoU9Z9xM2kQY//lQi1uW5kPM/KA== X-Received: by 2002:a17:902:f541:b0:20c:cf39:fe3c with SMTP id d9443c01a7336-2118359be6bmr214319595ad.41.1731412491780; Tue, 12 Nov 2024 03:54:51 -0800 (PST) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-21177dc9d2fsm91792515ad.8.2024.11.12.03.54.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 12 Nov 2024 03:54:50 -0800 (PST) From: Maxim Cournoyer To: Nicolas Graves Subject: Re: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes] In-Reply-To: <87ldxp6bhe.fsf@ngraves.fr> (Nicolas Graves's message of "Mon, 11 Nov 2024 16:23:09 +0100") References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-8-ngraves@ngraves.fr> <875xotap5c.fsf@gmail.com> <87ldxp6bhe.fsf@ngraves.fr> Date: Tue, 12 Nov 2024 20:54:44 +0900 Message-ID: <87jzd84qgr.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 74035-done Cc: 74035-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) Hi Nicolas, Nicolas Graves writes: > On 2024-11-11 22:14, Maxim Cournoyer wrote: > >> Hi, >> >> Nicolas Graves writes: >> >>> This fixes CVE-2023-29479 and CVE-2023-29480. >>> >>> * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. >>> [arguments]: Improve style using gexps. >>> <#:phases>: Add phase 'inject-sexpp-source. >>> [inputs]: Add sexpp. >> >> This one fails its test suite for me: >> >> --8<---------------cut here---------------start------------->8--- >> Start 15: rnp_tests.s2k_iteration_tuning >> 16/263 Test #15: rnp_tests.s2k_iteration_tuning ................................................***Failed 8.02 sec >> [...] >> The following tests FAILED: >> 15 - rnp_tests.s2k_iteration_tuning (Failed) >> --8<---------------cut here---------------end--------------->8--- >> >> It should probably be repoted upstream. > > Strange, it worked for me IIRC. Maybe tests are flaky and we should > exclude this one? The test appears to be sensitive to the CPU speed; upstream provided a solution. I've now applied this series, culminating with commit 44b06b030d. Thank you! -- Maxim ------------=_1731412562-12510-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 26 Oct 2024 22:33:24 +0000 Received: from localhost ([127.0.0.1]:42846 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pLX-00066g-VZ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:33:24 -0400 Received: from lists.gnu.org ([209.51.188.17]:48912) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pLW-00066Z-IW for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:33:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pKy-0006af-2d for guix-patches@gnu.org; Sat, 26 Oct 2024 18:32:48 -0400 Received: from 11.mo584.mail-out.ovh.net ([46.105.34.195]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pKw-0005Pp-A8 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:32:47 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.2.179]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZCt4jXXz1Pl8 for ; Sat, 26 Oct 2024 22:32:42 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-7f7jj (unknown [10.110.113.115]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 488761FDDC; Sat, 26 Oct 2024 22:32:42 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-7f7jj with ESMTPSA id vDxXBwpuHWdU3QIALPKLSA (envelope-from ); Sat, 26 Oct 2024 22:32:42 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0021f91fe0c-76e0-4846-8668-17f2e16d3842, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 From: Nicolas Graves To: guix-patches@gnu.org Subject: [PATCH 00/24] [security fixes] for near-leaf packages Date: Sun, 27 Oct 2024 00:29:48 +0200 Message-ID: <20241026223238.26667-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Ovh-Tracer-Id: 7929150095631442658 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudduucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeffgeetfffgffejgeejvdffgfdtvdeuueetgfefuedvjeegvdegjeejveeuueevnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeegpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=TR9DVQxpqO6JNm+Rxl4itS1RT8Pscd28W9kCvoLnsM0=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729981962; v=1; b=Ml22yt/NriKXGi/3AbiIxXMOF2lIMYZeLWyeiamdW7DV5dX+Su3DPzzsFSUGlcw+C2Gf5Tmm sRd1KVrwbpuLwb5DNMTxwqaP7Q5Qf2VoCdgEJ+oMvYWlxYFxilytg0XBFPLnugTn4SM0ruEu0Zd O5H1Ij2u7tpXQNddcrph3rTs4/65mWEtT8t3yMrvrBTJnDn/9UWPIF0U1gcz6hPwsrKiaoDm8PO yZUmIRhcg14TXQbrb9QVyKwJjbqZmoOO3JkjZw8CPiSUq7GdH7sMMtXB7Az+ZK6eYGKbWbMi4+d M1mvyMJoYN2GrgEiNvD9gYikwVe7omy09EfFfdtrWr64w== Received-SPF: pass client-ip=46.105.34.195; envelope-from=ngraves@ngraves.fr; helo=11.mo584.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit Cc: Nicolas Graves X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) This patch series adds updates and security fixes for packages that have less than 10 dependent packages. Nicolas Graves (24): gnu: python-django-4.2: Update to 4.2.16. [security fixes] gnu: maradns: Update to 3.5.0036. [security fixes] gnu: maradns: Improve style. gnu: libmobi: Update to 0.12. [security fixes] gnu: bart: Update to 0.9.00. [security fixes] gnu: wireshark: Update to 4.4.1. [security fixes] gnu: pam-u2f: Update to 1.3.0. [security fixes] gnu: darkhttpd: Update to 1.16. [security fixes] gnu: xlsxio: Update to 0.2.35. [security fixes] gnu: pypy: Update to 7.3.17. [security fixes] gnu: indent: Remove uneeded arguments. gnu: indent: Add patch for CVE-2024-0911. [security fixes] gnu: squashfs-tools: Update to 4.6.1. [security fixes] gnu: shapelib: Update to 1.6.1. [security fixes] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] gnu: gifsicle: Update to 1.95. [security fixes] gnu: sendmail: Update to 8.18.1. [security fixes] gnu: openvpn: Update to 2.6.12. [security fixes] gnu: youtube-dl: Deprecate package. gnu: liblouis: Update to 3.31.0. [security fixes] gnu: unicorn: Update to 2.1.1. [security fixes] gnu: Add sexpp. gnu: rnp: Update to 0.17.1. [security fixes] gnu: cjson: Update to 1.7.18. [security fixes] gnu/local.mk | 1 + gnu/packages/code.scm | 31 +------- gnu/packages/compression.scm | 52 ++++++------- gnu/packages/django.scm | 8 +- gnu/packages/dns.scm | 64 ++++++++-------- gnu/packages/ebook.scm | 4 +- gnu/packages/emulators.scm | 9 ++- gnu/packages/geo.scm | 8 +- gnu/packages/gnome.scm | 45 ++++++----- gnu/packages/image-processing.scm | 8 +- gnu/packages/image.scm | 4 +- gnu/packages/javascript.scm | 4 +- gnu/packages/language.scm | 47 ++++++------ gnu/packages/mail.scm | 5 +- gnu/packages/networking.scm | 4 +- gnu/packages/openpgp.scm | 76 +++++++++++++------ .../patches/indent-CVE-2024-0911.patch | 61 +++++++++++++++ gnu/packages/pypy.scm | 4 +- gnu/packages/security-token.scm | 9 +-- gnu/packages/video.scm | 3 +- gnu/packages/vpn.scm | 4 +- gnu/packages/web.scm | 24 +++--- gnu/packages/xml.scm | 4 +- 23 files changed, 278 insertions(+), 201 deletions(-) create mode 100644 gnu/packages/patches/indent-CVE-2024-0911.patch -- 2.46.0 ------------=_1731412562-12510-1-- From unknown Sun Jun 22 00:33:33 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH v4 8/8] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 12 Nov 2024 14:14:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Nicolas Graves Cc: 74035@debbugs.gnu.org Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.17314208113960 (code B ref 74035); Tue, 12 Nov 2024 14:14:03 +0000 Received: (at 74035) by debbugs.gnu.org; 12 Nov 2024 14:13:31 +0000 Received: from localhost ([127.0.0.1]:33005 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAre7-00011o-0Q for submit@debbugs.gnu.org; Tue, 12 Nov 2024 09:13:31 -0500 Received: from mail-pj1-f43.google.com ([209.85.216.43]:59774) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tAre4-00011a-6s for 74035@debbugs.gnu.org; Tue, 12 Nov 2024 09:13:28 -0500 Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-2e34a089cd3so4617373a91.3 for <74035@debbugs.gnu.org>; Tue, 12 Nov 2024 06:13:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1731420741; x=1732025541; darn=debbugs.gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=bVNhmP/GyxAQ2WLrDUdTRI3eYYrud5DVaBKHDOLh4JM=; b=Bhj5TuNTjrWO7RnuJg34JJnCWaig2un4cZa4j7JXGdRBoajJ1hu+KM1+ONVxImz2pX wQRdfgyEWJhMSThvmHdqyDwcMUQrfb4SVxq/BHuA234rI9fK0Z7WWk4rrZYlRqiSKcZJ CKcMDQ/amS5WsvGtgdrQnpkxuvq2kxgzmpbTXDDLjLISEbCycqQDAAjTgWVbwbFze29K l3IYOSfV2u5VnSQQ37wSLs5cZRAUTOSpTbinF5ZisEodxBzqD5qjMw/YsNCZlKuRgEVK qcdQ7cNJuugyw9s4Z23T/851w2DbKJNdkCpsU7GbXdvg/txVnN3jHCn+ng3y8bv/0QyG IiKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731420741; x=1732025541; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=bVNhmP/GyxAQ2WLrDUdTRI3eYYrud5DVaBKHDOLh4JM=; b=MPzFGeYsvtWQrs/p+VFyInHALhs1nYkOaZPkXz4wdemQt0re6dtCnbEgIfJnSP4bOL 9ZvXSqsTLougPuwXoObjkNDUKqlhqvQD9TzvD/2Uh1wRL8i0bAIMrvxXD5UzpaL+9xhY ei0J3kv2MWWkXODH03G1rex/sv3yjyONAuKit/YnIXbLdeKqRSE/TMI551nQagO0cLyR NBHeczeQF4cvJSr2ysysmt25ApxPJJAhQ0VDHhtiKj3qBA+GH71QPKmAtxBFErSeJkhN Yo+EIOxiZQRHSoUwbAf7UlIgAGo+CMbs2q5gjFJfMkZOtEy22gCGV/N6LyM+n/VfHdEk Nc9g== X-Gm-Message-State: AOJu0Yw/zaqKXikQLSsUMH5McBEylrokYOReWy3GOYYit+0yu/ZzzsS6 WxN6TLeHJVRHFmkC834rF1EB4tsGLw15Ers840qsazeXgfCACXhEefzge/Pl X-Google-Smtp-Source: AGHT+IHJaiYrdyUrwH1mZh5jVkg67lCfOsASFOmpnwIuCmcNoYgB/P2BBzaqHsntwE7RaDWLkjFcNQ== X-Received: by 2002:a17:90b:17cd:b0:2e2:d82b:d144 with SMTP id 98e67ed59e1d1-2e9b178fe07mr20663724a91.37.1731420741127; Tue, 12 Nov 2024 06:12:21 -0800 (PST) Received: from terra ([2405:6586:be0:0:c8ff:1707:9b9:af89]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2e9a5f5e5bcsm10613499a91.15.2024.11.12.06.12.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 12 Nov 2024 06:12:20 -0800 (PST) From: Maxim Cournoyer In-Reply-To: <20241105231405.21806-8-ngraves@ngraves.fr> (Nicolas Graves's message of "Wed, 6 Nov 2024 00:13:58 +0100") References: <20241105231405.21806-1-ngraves@ngraves.fr> <20241105231405.21806-8-ngraves@ngraves.fr> Date: Tue, 12 Nov 2024 23:12:13 +0900 Message-ID: <87frnw1qyq.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Nicolas Graves writes: > This fixes CVE-2023-29479 and CVE-2023-29480. > > * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. > [arguments]: Improve style using gexps. > <#:phases>: Add phase 'inject-sexpp-source. > [inputs]: Add sexpp. I could work it out with this: --8<---------------cut here---------------start------------->8--- modified gnu/packages/openpgp.scm @@ -117,6 +117,9 @@ (define-public rnp (list #:configure-flags ''("-DBUILD_SHARED_LIBS=on" + ;; Lower the minimum tuning ratio from 6 to 4, as suggested + ;; upstream to avoid the s2k_iteration_tuning failing. + "-DS2K_MINIMUM_TUNING_RATIO=4" "-DBUILD_TESTING=on" "-DDOWNLOAD_GTEST=off" "-DDOWNLOAD_RUBYRNP=off") @@ -129,22 +132,27 @@ (define-public rnp (add-after 'unpack 'inject-sexpp-source (lambda _ (rmdir "src/libsexpp") - (symlink #$(package-source (this-package-input "sexpp")) + (symlink #$(package-source (this-package-native-input "sexpp")) "src/libsexpp"))) (replace 'check - (lambda* (#:key tests? #:allow-other-keys) + (lambda* (#:key tests? parallel-tests? #:allow-other-keys) (when tests? ;; Some OpenPGP certificates used by the tests expire. ;; To work around that, set the time to roughly the ;; release date. - (invoke "faketime" #$day-of-release "make" "test"))))))) + (setenv "CTEST_OUTPUT_ON_FAILURE" "1") + (invoke "faketime" #$day-of-release "ctest" + "-j" (if parallel-tests? + (number->string (parallel-job-count)) + "1")))))))) (native-inputs - (list gnupg ; for tests - googletest ; for tests - libfaketime ; for tests + (list gnupg ;for tests + googletest ;for tests + libfaketime ;for tests pkg-config - python)) - (inputs (list botan bzip2 json-c sexpp zlib)) + python + sexpp)) ;sexpp is used as source only + (inputs (list botan bzip2 json-c zlib)) (synopsis "RFC4880-compliant OpenPGP library written in C++") (description --8<---------------cut here---------------end--------------->8--- Thanks to upstream's extreme responsiveness (answered in seconds!) Nitpick: inline comments shouldn't have a space between the ';' and the text. I've also made the test suite run in parallel and restored the CTEST_OUTPUT_ON_FAILURE behavior of the stock check phase, as that's very useful in case of problems. -- Thanks, Maxim