Received: (at 76692-done) by debbugs.gnu.org; 9 Mar 2025 21:56:37 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 09 17:56:37 2025 Received: from localhost ([127.0.0.1]:34670 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1trOdR-00056d-0U for submit <at> debbugs.gnu.org; Sun, 09 Mar 2025 17:56:37 -0400 Received: from cascadia.aikidev.net ([173.255.214.101]:34524) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <vagrant@HIDDEN>) id 1trOdI-00055Q-84 for 76692-done <at> debbugs.gnu.org; Sun, 09 Mar 2025 17:56:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org; s=1.vagrant.user; t=1741557381; bh=SbGaXSxKN4NOchzsl0qaGhqXnZc8HiulXPvNshAUgKg=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=FYxArFGWz/184NTogPJkYLp4T9MmuQG6Z06uw2NiImlfRAqM83QX/IVaeL5QW75hK th6ogtt0n1kv6D/e3lODF6ld+mVfRItCQdrDEvZHChSK6s8KrBiRAE1iqFOWRiZYQG 50wdWOQrGDkCtxpek6dH3bReh9Cc2HzuTh2Ol1TknD2/3bJH9JMFQXsB65T0mA3GvX o2uB0ihYoJmM/SaWx3t4TOJT55clqiczS+tyO4ze+GQG0TLckthQi/qhsUXvR6iYLR ezxMtAAUNVt/xmWqBwHpv3Q0+p8SkPOpK7e7bogbJ+h19Pe6GwWuEwKdqpcy+Hkmqn drszR5haarQow== Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50]) by cascadia.aikidev.net (Postfix) with ESMTPSA id C63342F5; Sun, 9 Mar 2025 14:56:21 -0700 (PDT) From: Vagrant Cascadian <vagrant@HIDDEN> To: 76692-done <at> debbugs.gnu.org Subject: Re: Update arm-trusted-firmware to 2.12.1 In-Reply-To: <87bjug63mb.fsf@wireframe> References: <87y0xn5enj.fsf@wireframe> <87bjug63mb.fsf@wireframe> Date: Sun, 09 Mar 2025 14:56:16 -0700 Message-ID: <87wmcx3m2n.fsf@wireframe> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 76692-done Cc: Efraim Flashner <efraim@HIDDEN> X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain On 2025-03-04, Vagrant Cascadian wrote: > On 2025-03-02, Vagrant Cascadian wrote: >> The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few >> CVE issues. >> >> All the various u-boot dependents still appear to build: ... > Finally got my rockpro64 up and running guix again, and boot-tested it, > so that is at least one platform! Pushed as: 3aed6ee07bd0d22cd6cf897eada7ea3b95f6adf5 gnu: arm-trusted-firmware: Update to 2.12.1. live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZ84OgAAKCRDcUY/If5cW qkQ4AQCC3Do9QxOCnHPhJY/YrFs3IWIsit7KbeflGctw36Al4wEAmmgJzBhdLDGx Gyg/sR/lkQKf/yFSCnfW46cjoa7pQw0= =qVt5 -----END PGP SIGNATURE----- --=-=-=--
Vagrant Cascadian <vagrant@HIDDEN>:Vagrant Cascadian <vagrant@HIDDEN>:Received: (at 76692) by debbugs.gnu.org; 4 Mar 2025 18:41:00 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Mar 04 13:41:00 2025 Received: from localhost ([127.0.0.1]:60882 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1tpXCO-0006Qg-2C for submit <at> debbugs.gnu.org; Tue, 04 Mar 2025 13:41:00 -0500 Received: from cascadia.aikidev.net ([2600:3c01:e000:267:0:a171:de7:c]:58258) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <vagrant@HIDDEN>) id 1tpXCL-0006QQ-2C for 76692 <at> debbugs.gnu.org; Tue, 04 Mar 2025 13:40:57 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org; s=1.vagrant.user; t=1741113650; bh=K0M1G/pMDXyGvDtScUnPqcYtqn5NqfcDw0bwZLTNGDE=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=Gu9vHRVheOn03+uHv0DY1Hn8cWqkMqPMSkfFhrleNzXO40nYIGtUusrQHLZLN9mPY QFFL+559AMMrsNRvDgj9uXIQbj//Rbtj//tH3lh/mR7G8gjkdDjleXZ1qa/PBVy7qA PgCmLN1eHLwkE/b/V6YigHfZiM6Kc40DNXXyoh+7Q72dILNfeZQe5O8084MNrCNRBZ 6bL6RxJGf3SCzEx+BKgaqHglM/iIqSaEzBdsYxQ2tsYKPdWUet6dIi6xboP/Vxjluh sDPpOa8lcZTb31/k+N4ADawoDEANFo/weQc/Zp+4576bv07P7ciUXNAxlMTvMqstOl WSCjaDzmpfqIw== Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50]) by cascadia.aikidev.net (Postfix) with ESMTPSA id 5303049DC; Tue, 4 Mar 2025 10:40:50 -0800 (PST) From: Vagrant Cascadian <vagrant@HIDDEN> To: 76692 <at> debbugs.gnu.org Subject: Re: Update arm-trusted-firmware to 2.12.1 In-Reply-To: <87y0xn5enj.fsf@wireframe> References: <87y0xn5enj.fsf@wireframe> Date: Tue, 04 Mar 2025 10:40:44 -0800 Message-ID: <87bjug63mb.fsf@wireframe> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 76692 Cc: Efraim Flashner <efraim@HIDDEN> X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain On 2025-03-02, Vagrant Cascadian wrote: > The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few > CVE issues. > > All the various u-boot dependents still appear to build: > > /gnu/store/641kcdl61xjsqn6001gmfqq8cx7j0pw3-u-boot-rock64-rk3328-2024.10 > /gnu/store/2lh91is66sa964nk4860f47f7bp58mfk-u-boot-orangepi-r1-plus-lts-rk3328-2024.10 > /gnu/store/f9vghparyywn7w9m3nxdlg8mpbwp1xgf-u-boot-firefly-rk3399-2024.10 > /gnu/store/8cd32i44gxbkig4z359l1d527wkzsqra-u-boot-pinebook-pro-rk3399-2024.10 > /gnu/store/j12i6bs7a4w1k7ssa4g2nfkmymv9pir4-u-boot-puma-rk3399-2024.10 > /gnu/store/a7s96k9k62aa36l733vdazgq7dvdjzas-u-boot-rockpro64-rk3399-2024.10 > /gnu/store/4mlmfxzy2kb6ilzm4k6hhr870i7m5f4y-u-boot-pinebook-2024.10 > /gnu/store/6d0476i6zkj1nsn78jyfclqpw5b5sgv7-u-boot-pine64-lts-2024.10 > /gnu/store/5csl9vwkn195qf37y4q8c8yq3x59mw11-u-boot-pine64-plus-2024.10 > > I have not done any boot testing. Finally got my rockpro64 up and running guix again, and boot-tested it, so that is at least one platform! live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZ8dJLAAKCRDcUY/If5cW qkM5AQCb+SKCU+qwlByVBM9uW9d35ZukippykXl3Jh1DdwiXgwD+Pn+l4YKTJEyg 3NAJ9U7stMMzclyyGLoWCsuNi7j24ws= =J8So -----END PGP SIGNATURE----- --=-=-=--
guix-patches@HIDDEN:bug#76692; Package guix-patches.
Full text available.
Received: (at submit) by debbugs.gnu.org; 2 Mar 2025 21:03:33 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 02 16:03:33 2025
Received: from localhost ([127.0.0.1]:36742 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1toqTE-0006mR-Ng
for submit <at> debbugs.gnu.org; Sun, 02 Mar 2025 16:03:33 -0500
Received: from lists.gnu.org ([2001:470:142::17]:49094)
by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.84_2) (envelope-from <vagrant@HIDDEN>)
id 1toqTC-0006lK-2Y
for submit <at> debbugs.gnu.org; Sun, 02 Mar 2025 16:03:30 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <vagrant@HIDDEN>)
id 1toqT5-00043W-1t
for guix-patches@HIDDEN; Sun, 02 Mar 2025 16:03:23 -0500
Received: from cascadia.aikidev.net ([173.255.214.101])
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <vagrant@HIDDEN>)
id 1toqT2-0002VT-Rb
for guix-patches@HIDDEN; Sun, 02 Mar 2025 16:03:22 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org;
s=1.vagrant.user; t=1740949397;
bh=QcTy+CCLf3Ym4sDytdIqNMdXZBw8KZm/er9fM2ZjuuI=;
h=From:To:Cc:Subject:Date:From;
b=FlzQFOnPe/opH5DFSj4gpIOFD0R6k/SxG4EoXFNHE1lQWJWSVahA1U+o2Y44ffeHJ
q3l6NAeKTIw7cpDuV8NgVxpfvse/WUl6lWvWuSbiWCjNIgg1Rv6OcdVKW3JUVosQup
SrjqC7HJ07LOYqpRTnrA8A+xwqiN3riMvX12iTy2rR4mgNtgUiiAW+PGW+IdxeVurh
L1NVgp/zRzudz//FtYr/46A2V4GMzFsRLP7y5vPF46t8g2BrBIwC3kRX3cK3vnGH36
BG2/DGM4MvM0FJw9ACdWDJT6LWO9EobrKxbR/UyfErQXH/qwK8ZS6Hg0t/edCVqtT5
aLnqQ8S4TNDMw==
Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50])
by cascadia.aikidev.net (Postfix) with ESMTPSA id A982E1D2A;
Sun, 2 Mar 2025 13:03:17 -0800 (PST)
From: Vagrant Cascadian <vagrant@HIDDEN>
To: guix-patches@HIDDEN
Subject: Update arm-trusted-firmware to 2.12.1
Date: Sun, 02 Mar 2025 13:03:12 -0800
Message-ID: <87y0xn5enj.fsf@wireframe>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="==-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
Received-SPF: none client-ip=173.255.214.101; envelope-from=vagrant@HIDDEN;
helo=cascadia.aikidev.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001,
DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
Cc: Efraim Flashner <efraim@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
--==-=-=
Content-Type: multipart/mixed; boundary="=-=-="
--=-=-=
Content-Type: text/plain
The attached patch updates arm-trusted-firmware to 2.12.1, fixing a few
CVE issues.
All the various u-boot dependents still appear to build:
/gnu/store/641kcdl61xjsqn6001gmfqq8cx7j0pw3-u-boot-rock64-rk3328-2024.10
/gnu/store/2lh91is66sa964nk4860f47f7bp58mfk-u-boot-orangepi-r1-plus-lts-rk3328-2024.10
/gnu/store/f9vghparyywn7w9m3nxdlg8mpbwp1xgf-u-boot-firefly-rk3399-2024.10
/gnu/store/8cd32i44gxbkig4z359l1d527wkzsqra-u-boot-pinebook-pro-rk3399-2024.10
/gnu/store/j12i6bs7a4w1k7ssa4g2nfkmymv9pir4-u-boot-puma-rk3399-2024.10
/gnu/store/a7s96k9k62aa36l733vdazgq7dvdjzas-u-boot-rockpro64-rk3399-2024.10
/gnu/store/4mlmfxzy2kb6ilzm4k6hhr870i7m5f4y-u-boot-pinebook-2024.10
/gnu/store/6d0476i6zkj1nsn78jyfclqpw5b5sgv7-u-boot-pine64-lts-2024.10
/gnu/store/5csl9vwkn195qf37y4q8c8yq3x59mw11-u-boot-pine64-plus-2024.10
I have not done any boot testing.
live well,
vagrant
--=-=-=
Content-Type: text/x-diff
Content-Disposition: inline;
filename=0001-gnu-arm-trusted-firmware-Update-to-2.12.1.patch
Content-Transfer-Encoding: quoted-printable
From=2017912f437b041fb790e29e07c7bfc2f543f7bb2c Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@HIDDEN>
Date: Sun, 2 Mar 2025 11:55:42 -0800
Subject: [PATCH] gnu: arm-trusted-firmware: Update to 2.12.1.
* gnu/packages/firmware.scm (make-arm-trusted-firmware): Update to 2.12.1.
=2D--
gnu/packages/firmware.scm | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/gnu/packages/firmware.scm b/gnu/packages/firmware.scm
index 2e78936d83..06c0664d31 100644
=2D-- a/gnu/packages/firmware.scm
+++ b/gnu/packages/firmware.scm
@@ -1107,17 +1107,17 @@ (define (native-build?)
(string=3D? (%current-system) (gnu-triplet->nix-system triplet))))
(package
(name (downstream-package-name "arm-trusted-firmware-" platform))
=2D (version "2.12")
+ (version "2.12.1")
(source
(origin
(method git-fetch)
(uri (git-reference
(url (string-append "https://git.trustedfirmware.org"
"/TF-A/trusted-firmware-a.git/"))
=2D (commit (string-append "v" version))))
+ (commit (string-append "lts-v" version))))
(file-name (git-file-name "arm-trusted-firmware" version))
(sha256
=2D (base32 "18rzhygvq0afcylirq9yis3kaa1nli14k2jrm64ih85gz4nhl99w"))
+ (base32 "1vngwbjghgsh5i02zq66nmbxxr2d4p93rirsvh5jrhbcdn0v5xf8"))
(patches (search-patches "8mq-enable-imx_hab_handler.patch"
"8mq-move-stack-to-ocram_s.patch"))
(modules '((guix build utils)))
base-commit: 6315f3ff4d3d0cf1bd89b92bdb9a139aee404ca2
=2D-=20
2.39.5
--=-=-=--
--==-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZ8THkAAKCRDcUY/If5cW
qo1GAQC3v1+5gXzSqL6qjvs8rYM0zB9biRwSaJtejdN/wxJDPwEAoWMdSdXQe3Sf
9kjGhMlzff/LpCswHwdoAV5OvgG9PwU=
=88Bc
-----END PGP SIGNATURE-----
--==-=-=--
Vagrant Cascadian <vagrant@HIDDEN>:guix-patches@HIDDEN.
Full text available.guix-patches@HIDDEN:bug#76692; Package guix-patches.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.