GNU logs - #74199, boring messages

Message sent to guix-patches@HIDDEN:

Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1
Resent-From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 04 Nov 2024 02:53:02 +0000
Resent-Message-ID: <handler.74199.B.173068872631039 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74199 <at> debbugs.gnu.org
Cc: Aaron Covrig <aaron.covrig.us@HIDDEN>
From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Date: Sun,  3 Nov 2024 21:48:50 -0500
Message-ID: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=2607:f8b0:4864:20::72a;
 envelope-from=aaron.covrig.us@HIDDEN; helo=mail-qk1-x72a.google.com
X-Spam_score_int: -23
X-Spam_score: -2.4
X-Spam_bar: --
X-Spam_report: (-2.4 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.34,
 DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

* gnu/packages/compression.scm (zlib): Update to version 1.3.1
---

The zlib version 1.3.1 update addresses CVE-2023-45853,
see issue: https://github.com/madler/zlib/issues/868

 gnu/packages/compression.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm
index 97696ff0ef..f39cbca84e 100644
--- a/gnu/packages/compression.scm
+++ b/gnu/packages/compression.scm
@@ -112,7 +112,7 @@ (define-module (gnu packages compression)
 (define-public zlib
   (package
     (name "zlib")
-    (version "1.3")
+    (version "1.3.1")
     (source
      (origin
        (method url-fetch)
@@ -122,7 +122,7 @@ (define-public zlib
                                  version "/zlib-" version ".tar.gz")))
        (sha256
         (base32
-         "0gjrz8p70mgkic7mxjh1vqwws4x8z7hq2fhbackvqg81jb1a82zz"))))
+         "08yzf8xz0q7vxs8mnn74xmpxsrs6wy0aan55lpmpriysvyvv54ws"))))
     (build-system gnu-build-system)
     (outputs '("out" "static"))
     (arguments

base-commit: 8964dfdb84f7d21dbc89c217ca4f4546a15990af
-- 
2.46.0

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Aaron Covrig <aaron.covrig.us@HIDDEN>
Subject: bug#74199: Acknowledgement ([PATCH] gnu: zlib: Update to version
 1.3.1)
Message-ID: <handler.74199.B.173068872631039.ack <at> debbugs.gnu.org>
References: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
X-Gnu-PR-Message: ack 74199
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Reply-To: 74199 <at> debbugs.gnu.org
Date: Mon, 04 Nov 2024 02:53:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 guix-patches@HIDDEN

If you wish to submit further information on this problem, please
send it to 74199 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
74199: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D74199
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to guix-patches@HIDDEN:

Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 04 Nov 2024 06:14:01 +0000
Resent-Message-ID: <handler.74199.B.173070083923265 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74199 <at> debbugs.gnu.org
Cc: Aaron Covrig <aaron.covrig.us@HIDDEN>
From: Nicolas Graves <ngraves@HIDDEN>
In-Reply-To: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
References: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
Date: Mon, 04 Nov 2024 07:13:45 +0100
Message-ID: <87cyjbwmp2.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Received-SPF: pass client-ip=87.98.172.75; envelope-from=ngraves@HIDDEN;
 helo=4.mo560.mail-out.ovh.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

On 2024-11-03 21:48, Aaron Covrig via Guix-patches via wrote:

> * gnu/packages/compression.scm (zlib): Update to version 1.3.1
> ---
>
> The zlib version 1.3.1 update addresses CVE-2023-45853,
> see issue: https://github.com/madler/zlib/issues/868

Hi Aaron,

This is true, but rebuilding zlib will rebuild more than 30000 packages.
You can see that with  guix refresh -l zlib | cut -d : -f 1 
That's why we can't simply merge a patch like that.  There are two
solutions in this case, to my knowledge: 
- use a graft (see the manual, or packages with a "replacement" field)
- wait for core-updates to pick up this commit

In the meantime, marking this commit as moreinfo, we don't want to
compute the revision for this.

-- 
Best regards,
Nicolas Graves

Message sent to guix-patches@HIDDEN:

Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 04 Nov 2024 06:14:02 +0000
Resent-Message-ID: <handler.74199.B74199.173070083423252 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74199 <at> debbugs.gnu.org
Cc: Aaron Covrig <aaron.covrig.us@HIDDEN>
From: Nicolas Graves <ngraves@HIDDEN>
In-Reply-To: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
References: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
Date: Mon, 04 Nov 2024 07:13:45 +0100
Message-ID: <87cyjbwmp2.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On 2024-11-03 21:48, Aaron Covrig via Guix-patches via wrote:

> * gnu/packages/compression.scm (zlib): Update to version 1.3.1
> ---
>
> The zlib version 1.3.1 update addresses CVE-2023-45853,
> see issue: https://github.com/madler/zlib/issues/868

Hi Aaron,

This is true, but rebuilding zlib will rebuild more than 30000 packages.
You can see that with  guix refresh -l zlib | cut -d : -f 1 
That's why we can't simply merge a patch like that.  There are two
solutions in this case, to my knowledge: 
- use a graft (see the manual, or packages with a "replacement" field)
- wait for core-updates to pick up this commit

In the meantime, marking this commit as moreinfo, we don't want to
compute the revision for this.

-- 
Best regards,
Nicolas Graves

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 4 Nov 2024 06:18:02 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Nov 04 01:18:02 2024
Received: from localhost ([127.0.0.1]:37597 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1t7qPa-0006D8-GI
	for submit <at> debbugs.gnu.org; Mon, 04 Nov 2024 01:18:02 -0500
Received: from 2.mo581.mail-out.ovh.net ([87.98.143.68]:40353)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ngraves@HIDDEN>) id 1t7qPY-0006Ck-D2
 for control <at> debbugs.gnu.org; Mon, 04 Nov 2024 01:18:01 -0500
Received: from director9.ghost.mail-out.ovh.net (unknown [10.108.2.205])
 by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4Xhh930xLXz1GcV
 for <control <at> debbugs.gnu.org>; Mon,  4 Nov 2024 06:17:58 +0000 (UTC)
Received: from ghost-submission-5b5ff79f4f-2tcwc (unknown [10.111.182.62])
 by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 707171FE11
 for <control <at> debbugs.gnu.org>; Mon,  4 Nov 2024 06:17:58 +0000 (UTC)
Received: from ngraves.fr ([37.59.142.102])
 by ghost-submission-5b5ff79f4f-2tcwc with ESMTPSA
 id mFZxBRZnKGeDVgAArq4mpg (envelope-from <ngraves@HIDDEN>)
 for <control <at> debbugs.gnu.org>; Mon, 04 Nov 2024 06:17:58 +0000
Authentication-Results: garm.ovh; auth=pass
 (GARM-102R00449eecbb1-4245-4931-a309-e94f42bb7a4a,
 6826D72474407C00B0362192A41B8D866221CAAC) smtp.auth=ngraves@HIDDEN
X-OVh-ClientIp: 86.246.19.221
From: Nicolas Graves <ngraves@HIDDEN>
To: control <at> debbugs.gnu.org
Subject: tag 74199 moreinfo
Date: Mon, 04 Nov 2024 07:17:55 +0100
Message-ID: <878qtzwmi4.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Ovh-Tracer-Id: 7428124635689640549
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelhedgleefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvffufffkgggtsehttdertddttddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepueejleeileejfffhleetjedtleejheevudffleevgfdufeekhefgvddvveegveefnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegtohhnthhrohhlseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth
DKIM-Signature: a=rsa-sha256; bh=gFfy6mAkbexmwTdTbOJ1Pr8C//zxdoWgvJLq71k/A80=; 
 c=relaxed/relaxed; d=ngraves.fr; h=From;
 s=ovhmo4487190-selector1; t=1730701079; v=1;
 b=rH4GvkVIB+JbwCSpf8vw1Zjf0YwycTBH1mCEMzs5nzr9x1fL+f993vwiH+vUvi0xfQRZpF16
 lkhf5OEuaa64oxMLdH236KUAnzv+FFhSPvA1e4zPHkxdjJ2rrBw8PVp378XxkLKlRcWxAEnIFMU
 qw7iNTqZVr0RtWGe/733uiMQAmyY4xLsvPz0QM+iA76tIrkiRDAFDlzuLpyngJjsgMNUk9NMzA/
 f/QV0sq3p3oF9tefamnnmeiyOKgMVV5B2tl99Ys2hJrZNWXsqVRXqGfpiv6bryTRwiZD5HG9Yn+
 wHcWvPSyciFpU9l+kvEVNt8K3BcRgMn5nGIrwPV0wLPUQ==
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

tags 74199 + moreinfo
quit

-- 
Best regards,
Nicolas Graves

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1
Resent-From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 04 Nov 2024 13:02:01 +0000
Resent-Message-ID: <handler.74199.B.17307252657562 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 74199
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch moreinfo
To: Nicolas Graves <ngraves@HIDDEN>
Cc: 74199 <at> debbugs.gnu.org
X-Debbugs-Original-Cc: 74199 <at> debbugs.gnu.org, Aaron Covrig via Guix-patches via <guix-patches@HIDDEN>
Received: via spool by submit <at> debbugs.gnu.org id=B.17307252657562
          (code B ref -1); Mon, 04 Nov 2024 13:02:01 +0000
Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 13:01:05 +0000
Received: from localhost ([127.0.0.1]:39716 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1t7whc-0001xu-EI
	for submit <at> debbugs.gnu.org; Mon, 04 Nov 2024 08:01:04 -0500
Received: from lists.gnu.org ([209.51.188.17]:39122)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <aaron.covrig.us@HIDDEN>) id 1t7whY-0001xO-19
 for submit <at> debbugs.gnu.org; Mon, 04 Nov 2024 08:01:03 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <aaron.covrig.us@HIDDEN>)
 id 1t7whE-0007qx-M8
 for guix-patches@HIDDEN; Mon, 04 Nov 2024 08:00:44 -0500
Received: from mail-lf1-x133.google.com ([2a00:1450:4864:20::133])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <aaron.covrig.us@HIDDEN>)
 id 1t7whB-00055G-0w
 for guix-patches@HIDDEN; Mon, 04 Nov 2024 08:00:39 -0500
Received: by mail-lf1-x133.google.com with SMTP id
 2adb3069b0e04-53a0c160b94so4645401e87.2
 for <guix-patches@HIDDEN>; Mon, 04 Nov 2024 05:00:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=ieee.org; s=google; t=1730725235; x=1731330035; darn=gnu.org;
 h=cc:to:subject:message-id:date:from:in-reply-to:references
 :mime-version:from:to:cc:subject:date:message-id:reply-to;
 bh=g/db/yq7WZzRKwRbwx6KAogfEt5a7ZvnGfU9s+kCwqs=;
 b=euP7SHquR/yNE439XgmFORovpCYBbryNTuoroE74FPE9dTB0zB8mYSQOHv31IAp4nf
 6gNN5s2IzUIsjGXBFOaLcbBSobtHt0hW6kOxJFkAMKUqehvEJeZ+EoQwZcPmltQrZaIN
 ZrDtel8NPEjAA/pnnry9rqsFiHbHehen8So9U=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1730725235; x=1731330035;
 h=cc:to:subject:message-id:date:from:in-reply-to:references
 :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=g/db/yq7WZzRKwRbwx6KAogfEt5a7ZvnGfU9s+kCwqs=;
 b=XWErvDtEUgEDcOfLyFgAk3xEoxHXJftJ4z50PWfdYVpArwSN+s8/tnSuc1ABrz/3sW
 /T3LfP2LU2IiuKSFeDFXekAqUA1IXw5jGse6jV3Kr6l/2ZIwicYn9/ZtWfsuiwxnia2I
 GpdVuwBCNVDq1up2BJDWhbWOzFIjZ4pDsKyTI0Ak+Pq0MGW03+AebeiI/5zoKowgYbZG
 F9i+UHbAYimZMTAjuJOsGfrYwhLN/B6Ka0magIu3FtSjk+xy4euHr7zxV+jF8s0XMsqv
 aWmjmu1cTqjVHP9E9YCrHZSozb1UI+Dw4y8BQ64iYvmtT0anATDUZzrbFNUrxZQvUof5
 ACmw==
X-Gm-Message-State: AOJu0YwD5MeXEVjr/CuPrc866IIdv4DaDab3njf173qYC2dxxVA0cXJH
 HbeRBbQAJyq4GyJqRSdqWRHqnHJbHrRhxfVvhf+HpANJsBupsxgkWPvqRH1NuIq0sLp2pLMxphf
 lmr3iC7hKEOLLDKwrfN0A0n51CI0fTypnR0oyJ79vi2pZoIw=
X-Google-Smtp-Source: AGHT+IHJDviLksxYmafOUbedN3utzhUnFKN+7JdJxqDSUBHO+ehgpuyroxsWL9REM5oU4Dn+zDRQL3peBnl+nRQd4ZQ=
X-Received: by 2002:a05:6512:3a8b:b0:53b:2105:1919 with SMTP id
 2adb3069b0e04-53d65df2463mr5324089e87.14.1730725234591; Mon, 04 Nov 2024
 05:00:34 -0800 (PST)
MIME-Version: 1.0
References: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
 <87cyjbwmp2.fsf@HIDDEN>
In-Reply-To: <87cyjbwmp2.fsf@HIDDEN>
From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Date: Mon, 4 Nov 2024 08:00:23 -0500
Message-ID: <CAK7qAcSKfY+3E1BJWRVoGuWudCcFDy8i0Lhb49Auk0buvp_O7A@HIDDEN>
Content-Type: multipart/alternative; boundary="000000000000d040d2062615dee4"
Received-SPF: pass client-ip=2a00:1450:4864:20::133;
 envelope-from=aaron.covrig.us@HIDDEN; helo=mail-lf1-x133.google.com
X-Spam_score_int: -23
X-Spam_score: -2.4
X-Spam_bar: --
X-Spam_report: (-2.4 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.34,
 DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--000000000000d040d2062615dee4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello Nicolas,

Ok, should I resubmit against =E2=80=98core-updates=E2=80=99 or is this aut=
omatically done
via the marking for more info?

v/r,

Aaron Covrig

On Mon, Nov 4, 2024 at 01:13 Nicolas Graves <ngraves@HIDDEN> wrote:

> On 2024-11-03 21:48, Aaron Covrig via Guix-patches via wrote:
>
> > * gnu/packages/compression.scm (zlib): Update to version 1.3.1
> > ---
> >
> > The zlib version 1.3.1 update addresses CVE-2023-45853,
> > see issue: https://github.com/madler/zlib/issues/868
>
> Hi Aaron,
>
> This is true, but rebuilding zlib will rebuild more than 30000 packages.
> You can see that with  guix refresh -l zlib | cut -d : -f 1
> That's why we can't simply merge a patch like that.  There are two
> solutions in this case, to my knowledge:
> - use a graft (see the manual, or packages with a "replacement" field)
> - wait for core-updates to pick up this commit
>
> In the meantime, marking this commit as moreinfo, we don't want to
> compute the revision for this.
>
> --
> Best regards,
> Nicolas Graves
>

--000000000000d040d2062615dee4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hello Nicolas,</div><div dir=3D"auto"><br></div><div dir=
=3D"auto">Ok, should I resubmit against =E2=80=98core-updates=E2=80=99 or i=
s this automatically done via the marking for more info?</div><div dir=3D"a=
uto"><br></div><div dir=3D"auto">v/r,</div><div dir=3D"auto"><br></div><div=
 dir=3D"auto">Aaron Covrig</div><div><br><div class=3D"gmail_quote"><div di=
r=3D"ltr" class=3D"gmail_attr">On Mon, Nov 4, 2024 at 01:13 Nicolas Graves =
&lt;<a href=3D"mailto:ngraves@HIDDEN">ngraves@HIDDEN</a>&gt; wrote:=
<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-le=
ft-color:rgb(204,204,204)">On 2024-11-03 21:48, Aaron Covrig via Guix-patch=
es via wrote:<br>
<br>
&gt; * gnu/packages/compression.scm (zlib): Update to version 1.3.1<br>
&gt; ---<br>
&gt;<br>
&gt; The zlib version 1.3.1 update addresses CVE-2023-45853,<br>
&gt; see issue: <a href=3D"https://github.com/madler/zlib/issues/868" rel=
=3D"noreferrer" target=3D"_blank">https://github.com/madler/zlib/issues/868=
</a><br>
<br>
Hi Aaron,<br>
<br>
This is true, but rebuilding zlib will rebuild more than 30000 packages.<br=
>
You can see that with=C2=A0 guix refresh -l zlib | cut -d : -f 1 <br>
That&#39;s why we can&#39;t simply merge a patch like that.=C2=A0 There are=
 two<br>
solutions in this case, to my knowledge: <br>
- use a graft (see the manual, or packages with a &quot;replacement&quot; f=
ield)<br>
- wait for core-updates to pick up this commit<br>
<br>
In the meantime, marking this commit as moreinfo, we don&#39;t want to<br>
compute the revision for this.<br>
<br>
-- <br>
Best regards,<br>
Nicolas Graves<br>
</blockquote></div></div>

--000000000000d040d2062615dee4--

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1
Resent-From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 04 Nov 2024 13:02:02 +0000
Resent-Message-ID: <handler.74199.B74199.17307252987586 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 74199
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch moreinfo
To: Nicolas Graves <ngraves@HIDDEN>
Cc: 74199 <at> debbugs.gnu.org
X-Debbugs-Original-Cc: 74199 <at> debbugs.gnu.org, Aaron Covrig via Guix-patches via <guix-patches@HIDDEN>
Received: via spool by 74199-submit <at> debbugs.gnu.org id=B74199.17307252987586
          (code B ref 74199); Mon, 04 Nov 2024 13:02:02 +0000
Received: (at 74199) by debbugs.gnu.org; 4 Nov 2024 13:01:38 +0000
Received: from localhost ([127.0.0.1]:39722 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1t7wi9-0001yI-WD
	for submit <at> debbugs.gnu.org; Mon, 04 Nov 2024 08:01:38 -0500
Received: from mail-lf1-f41.google.com ([209.85.167.41]:50423)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <aaron.covrig.us@HIDDEN>) id 1t7wi7-0001yA-Pj
 for 74199 <at> debbugs.gnu.org; Mon, 04 Nov 2024 08:01:36 -0500
Received: by mail-lf1-f41.google.com with SMTP id
 2adb3069b0e04-539ee1acb86so4113224e87.0
 for <74199 <at> debbugs.gnu.org>; Mon, 04 Nov 2024 05:01:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=ieee.org; s=google; t=1730725235; x=1731330035; darn=debbugs.gnu.org;
 h=cc:to:subject:message-id:date:from:in-reply-to:references
 :mime-version:from:to:cc:subject:date:message-id:reply-to;
 bh=g/db/yq7WZzRKwRbwx6KAogfEt5a7ZvnGfU9s+kCwqs=;
 b=OhJ/H+MV/a3JlYMQhZboI5Dm25kAUBV2cPcIc+yUHOqYZyXJzUk9egbm6ei2dJmRxJ
 1rpUAweA6h7BcYHWU20HaPuEPuemTaRJOsFw7+dCIowc655/URNmh/108JU8uzbX+487
 cFBcTTuwI935MVGnPgFijKiUHytf6JV1mSjIk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1730725235; x=1731330035;
 h=cc:to:subject:message-id:date:from:in-reply-to:references
 :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=g/db/yq7WZzRKwRbwx6KAogfEt5a7ZvnGfU9s+kCwqs=;
 b=nBkTJCm6GgVmCxmE0RuhsMArsGKiKt9I2GQoYGxOALlzTUqvj5HirgYzLLQrlduAsK
 tg7HqQg6uEF/B+6EbOohpGyKlkWRLPbAr2+SjPI7CtKUVgPb8ihz9rQKUin2fHD41VrZ
 ONhNWcqypOoszWgTdgoIGGxDAz0xWGoVvKuQCcKaXzbelzoh+rMg6gZ+N4j8+EN8eWhS
 gBEAj7qovEDXXNXudUsH7czo5uVPerTj9RsjwPL1d2jfWdfCTdk4UUABur8Cmf9iHgrV
 wmhZnWGvLmE3rRIXCXAIfJsLapkrhKbvqokp0px8vyN74EvE5KOSQMsJCGkWyvyLQquv
 BkCg==
X-Forwarded-Encrypted: i=1;
 AJvYcCUUIxDdUtrvBXlAslV7QBcVqySKOxbk4Bno05l1a65L/IQb3CY/hHtaZH+QA42WYd/9g4IyFQ==@debbugs.gnu.org
X-Gm-Message-State: AOJu0Yy31rzjwc9bygRBe0bRgd3eeK7HP354B83T9F9gQXc1xF8+Q7TV
 DCpjcugGNggkqNYGL8Mt272BUW42CPBBc/XyPXVzLq1sz7O1N5yANw2U0rRg2J7s9ACcUz+RqEb
 h8td2OdKVdU2Ly15XoxU/M3yo4lSPWqc+S1yB
X-Google-Smtp-Source: AGHT+IHJDviLksxYmafOUbedN3utzhUnFKN+7JdJxqDSUBHO+ehgpuyroxsWL9REM5oU4Dn+zDRQL3peBnl+nRQd4ZQ=
X-Received: by 2002:a05:6512:3a8b:b0:53b:2105:1919 with SMTP id
 2adb3069b0e04-53d65df2463mr5324089e87.14.1730725234591; Mon, 04 Nov 2024
 05:00:34 -0800 (PST)
MIME-Version: 1.0
References: <20241104025149.1380320-1-aaron.covrig.us@HIDDEN>
 <87cyjbwmp2.fsf@HIDDEN>
In-Reply-To: <87cyjbwmp2.fsf@HIDDEN>
From: Aaron Covrig <aaron.covrig.us@HIDDEN>
Date: Mon, 4 Nov 2024 08:00:23 -0500
Message-ID: <CAK7qAcSKfY+3E1BJWRVoGuWudCcFDy8i0Lhb49Auk0buvp_O7A@HIDDEN>
Content-Type: multipart/alternative; boundary="000000000000d040d2062615dee4"
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--000000000000d040d2062615dee4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello Nicolas,

Ok, should I resubmit against =E2=80=98core-updates=E2=80=99 or is this aut=
omatically done
via the marking for more info?

v/r,

Aaron Covrig

On Mon, Nov 4, 2024 at 01:13 Nicolas Graves <ngraves@HIDDEN> wrote:

> On 2024-11-03 21:48, Aaron Covrig via Guix-patches via wrote:
>
> > * gnu/packages/compression.scm (zlib): Update to version 1.3.1
> > ---
> >
> > The zlib version 1.3.1 update addresses CVE-2023-45853,
> > see issue: https://github.com/madler/zlib/issues/868
>
> Hi Aaron,
>
> This is true, but rebuilding zlib will rebuild more than 30000 packages.
> You can see that with  guix refresh -l zlib | cut -d : -f 1
> That's why we can't simply merge a patch like that.  There are two
> solutions in this case, to my knowledge:
> - use a graft (see the manual, or packages with a "replacement" field)
> - wait for core-updates to pick up this commit
>
> In the meantime, marking this commit as moreinfo, we don't want to
> compute the revision for this.
>
> --
> Best regards,
> Nicolas Graves
>

--000000000000d040d2062615dee4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hello Nicolas,</div><div dir=3D"auto"><br></div><div dir=
=3D"auto">Ok, should I resubmit against =E2=80=98core-updates=E2=80=99 or i=
s this automatically done via the marking for more info?</div><div dir=3D"a=
uto"><br></div><div dir=3D"auto">v/r,</div><div dir=3D"auto"><br></div><div=
 dir=3D"auto">Aaron Covrig</div><div><br><div class=3D"gmail_quote"><div di=
r=3D"ltr" class=3D"gmail_attr">On Mon, Nov 4, 2024 at 01:13 Nicolas Graves =
&lt;<a href=3D"mailto:ngraves@HIDDEN">ngraves@HIDDEN</a>&gt; wrote:=
<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-le=
ft-color:rgb(204,204,204)">On 2024-11-03 21:48, Aaron Covrig via Guix-patch=
es via wrote:<br>
<br>
&gt; * gnu/packages/compression.scm (zlib): Update to version 1.3.1<br>
&gt; ---<br>
&gt;<br>
&gt; The zlib version 1.3.1 update addresses CVE-2023-45853,<br>
&gt; see issue: <a href=3D"https://github.com/madler/zlib/issues/868" rel=
=3D"noreferrer" target=3D"_blank">https://github.com/madler/zlib/issues/868=
</a><br>
<br>
Hi Aaron,<br>
<br>
This is true, but rebuilding zlib will rebuild more than 30000 packages.<br=
>
You can see that with=C2=A0 guix refresh -l zlib | cut -d : -f 1 <br>
That&#39;s why we can&#39;t simply merge a patch like that.=C2=A0 There are=
 two<br>
solutions in this case, to my knowledge: <br>
- use a graft (see the manual, or packages with a &quot;replacement&quot; f=
ield)<br>
- wait for core-updates to pick up this commit<br>
<br>
In the meantime, marking this commit as moreinfo, we don&#39;t want to<br>
compute the revision for this.<br>
<br>
-- <br>
Best regards,<br>
Nicolas Graves<br>
</blockquote></div></div>

--000000000000d040d2062615dee4--

Last modified: Sun, 12 Jan 2025 05:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.