From patchwork Sat Oct 26 22:41:11 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69491 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 2305D27BBEA; Sat, 26 Oct 2024 23:43:41 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 5A58327BBE2 for ; Sat, 26 Oct 2024 23:43:40 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007ka-P1; Sat, 26 Oct 2024 18:42:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUO-0007ip-Gs for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUO-00070f-8R for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=tOpxwgXb+22fczCQLdlZBnBA9Ygvb9DrmMyDU38k5C4=; b=XJINRj8QGD4pqbYDcOc9meyRXchVtfRZv5qwcUwK8IPbAaPXGSVrZq5haN0pmTVdWihVOIqoXwj429thKW1poFNPrnM4x+ZpU5IttE1TsLXbAOWd0ZfU63nzjqxGLebsHIRCKmEbfT4raQZYFa/h8n/qjqUlaob/oKyWiILVr7KnKDM/NaXugRCMxuzjTxJieTGltp4zbhi1DvT+g17vU5YqmHS44ubyiF4jD4XkKEB9nTj9yKCIaOQtyNs+GKqtk25MSQ8x9K/3Pq3VvZV7kGgtafU7tS6mvRfrcoP+JkUxYounxDc1i6HlloMPlQg7wRIo/o4Svn9/qzC5INlYcQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUw-0006fL-4H for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 11/21] gnu: bolt: Update to 0.9.8. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255425406 (code B ref 74034); Sat, 26 Oct 2024 22:43:06 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:34 +0000 Received: from localhost ([127.0.0.1]:42930 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUP-0006bd-F1 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from 15.mo550.mail-out.ovh.net ([188.165.38.232]:37937) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUC-0006aX-2Z for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:21 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.25.152]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQJ5bftz1RYP for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:44 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.118.167]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 637C51FD18; Sat, 26 Oct 2024 22:41:44 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id nctgEChwHWdqAhIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:41:44 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R00661522e1b-861a-444b-ac23-7126636759e1, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:11 +0200 Message-ID: <20241026224125.29272-11-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8081709534016627426 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleegveeuhfdukeeghfelhedugfefkedvgfffjeffkeekgfegheevleeutdduleeunecuffhomhgrihhnpehfrhgvvgguvghskhhtohhprdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=tOpxwgXb+22fczCQLdlZBnBA9Ygvb9DrmMyDU38k5C4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982504; v=1; b=QOU5tRtzZppc2s8wkW/NLOVrH9DA38HxP5QqzXhR54JA7X04rrBy1QdK/Y0hUBspGKWhBOJc oU5K6lj2Je4ifY1ukQ6tguKID1qlo39e3bF6Ds19zOSBXQ/lKxymuuZRSbl2sfBIQkV/o5PwApS i9ff+1mSZK7A2W5DOZ3UMpdf9jYvK8wiUiAQ+zBTC5OsmKHSM5WLl+gW1kZM8ZZsDbH0bMHrpEI TM97h9NAHqgI+xyhSe6avF596va8YIEC1dG4IOgmoeCOxyfKxTLqowaTLWFNt9/qISgEcNGWZUP zkpKJjPy9HLqiIXKcWnA45q5ytQ41WIo8c2ConaFGUsHw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/linux.scm (bolt): Update to 0.9.8. [arguments]<#:phases>: Update phase 'replace-directories. [properties]: Add lint-hidden-cve property. --- gnu/packages/linux.scm | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index e496f3c88d..f9f13ca28a 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -3366,7 +3366,7 @@ (define-public iptables-nft (define-public bolt (package (name "bolt") - (version "0.9.5") + (version "0.9.8") (source (origin (method git-fetch) (uri (git-reference @@ -3375,7 +3375,7 @@ (define-public bolt (file-name (git-file-name name version)) (sha256 (base32 - "1b9z0sfrz6bj0mddng9s0dx59g9239zmrl03hxx2x88mb7r0wmcg")))) + "1i9nyvx3qcf4m607qmpklpl9xqzsh423k8y3fr6c5n0k4ajy4cxh")))) (build-system meson-build-system) (arguments (list #:configure-flags '(list "--localstatedir=/var") @@ -3384,12 +3384,11 @@ (define-public bolt (add-after 'unpack 'replace-directories (lambda* (#:key outputs #:allow-other-keys) (substitute* "meson.build" - (("udev.get_pkgconfig_variable..udevdir..") - (string-append "'" - #$output "/lib/udev'"))) - (substitute* "scripts/meson-install.sh" - (("mkdir.*") - "")))) + (("udev.get_variable\\(pkgconfig: 'udevdir'\\)") + (string-append "'" #$output "/lib/udev'")) + ;; Don't install in /var + (("not systemd\\.found\\(\\)") + "false")))) (add-before 'install 'no-polkit-magic (lambda* (#:key outputs #:allow-other-keys) (setenv "PKEXEC_UID" "something")))))) @@ -3411,6 +3410,12 @@ (define-public bolt @command{boltd}. It can list devices, monitor changes, and initiate authorization of devices.") (home-page "https://gitlab.freedesktop.org/bolt/bolt") + (properties `((lint-hidden-cve . (;; These CVEs concern... + ;; ...the Bolt PHP cms + "CVE-2021-27367" + "CVE-2022-31321" + ;; ...the Bolt orchestration tool + "CVE-2023-5214")))) (license license:gpl2+))) (define-public jitterentropy-rngd