From patchwork Sat Oct 26 22:41:01 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69480 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 65C2127BBEA; Sat, 26 Oct 2024 23:43:07 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id DC1D427BBE2 for ; Sat, 26 Oct 2024 23:43:06 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUM-0007hH-60; Sat, 26 Oct 2024 18:42:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUK-0007gR-7U for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUJ-0006zL-VP for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:In-Reply-To:References:Subject; bh=tzxiP39YU3VDBWTdvgjMX2pybX7l/XsR45MTvzMVRkA=; b=RKvaWNir8svOkDbxA/FzjDh2YJkmhFngQxUK9EUkoPWn83AIysxcL5Cp/isUhwuRZXJArKzJXa2LzX9ItZBX7Spy81L/29GV+uGU2UD963pHo5Mabr0cVuzn/HogrHSLlzDvvgLHsc3XCIKJKawq4ba1y+FF1Ez1xY1Pa7dsvh0knWoNIinLjFZqmNbg8w86FPh3oLhG4JxOdq9mfXolr/FyKY8HJCPdFUEuVREMW9FOMFYcZqhH6rtB52X0RTUBNjQ+z2BbtmQ6bv7KlotzGeZVF+w/fTHBK6lVJUjc8eUmpaSrykB4x+5rqtCGpvgd7K/sOikp3Np42y/8/EvlDQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUr-0006eE-RM for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 01/21] gnu: libgda: Rename patch for guix lint. References: <20241026222934.25890-1-ngraves@ngraves.fr> In-Reply-To: <20241026222934.25890-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253225246 (code B ref 74034); Sat, 26 Oct 2024 22:43:01 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:12 +0000 Received: from localhost ([127.0.0.1]:42888 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU4-0006Yz-1b for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:12 -0400 Received: from 7.mo576.mail-out.ovh.net ([46.105.50.32]:46845) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU1-0006Yo-Ey for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:10 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQ61DJhz1sJC for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:33 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-kj8qr (unknown [10.108.42.32]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 9F3AC1FDE6; Sat, 26 Oct 2024 22:41:33 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-kj8qr with ESMTPSA id BqusAR1wHWc2jQAAomMT1g (envelope-from ); Sat, 26 Oct 2024 22:41:33 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003e8cc635f-7632-4ad8-b846-0ccc1dbc8714, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:01 +0200 Message-ID: <20241026224125.29272-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 X-Ovh-Tracer-Id: 8078613306859512546 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeffgeetfffgffejgeejvdffgfdtvdeuueetgfefuedvjeegvdegjeejveeuueevnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=tzxiP39YU3VDBWTdvgjMX2pybX7l/XsR45MTvzMVRkA=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982494; v=1; b=Eb1gFvNhpBHDfaSV/5Q4XQ5mRoR/OPNuMmUn90aXNjMibBFEVt04V3L2aX2T6Tcn0IgbAWeO emDO28zevt0Zj6FlfVM/QSmb+XcgaS+kyH5D4zRPpUK4i2x4wE/qGOMh1dY9lKm6KtMPexom1JU 4v8tok4g5Bdg37NamGE7ra+9bO6HwAg3+XhEWlg6mZHCB9Vg9/KFWnPllWIKY240xG/GcthiTD2 bew+9P7A8fLEX4UbGqVgdnuT8GgG1NwU53oYV/7i9Wbt+tZcUVe15HHiC5ovpADouYUovvossrv 8YfmqWzkIhxHXIMRjgwHHzQAELVhVykj1eq8oKBscdV1g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/gnome.scm (libgda)[source]: Rename patch for CVE to be ignored by guix lint. --- gnu/local.mk | 2 +- gnu/packages/gnome.scm | 2 +- ...{libgda-cve-2021-39359.patch => libgda-CVE-2021-39359.patch} | 0 3 files changed, 2 insertions(+), 2 deletions(-) rename gnu/packages/patches/{libgda-cve-2021-39359.patch => libgda-CVE-2021-39359.patch} (100%) diff --git a/gnu/local.mk b/gnu/local.mk index c432685775..d253b424bb 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1666,7 +1666,7 @@ dist_patch_DATA = \ %D%/packages/patches/libcroco-CVE-2020-12825.patch \ %D%/packages/patches/libcyaml-libyaml-compat.patch \ %D%/packages/patches/libexpected-use-provided-catch2.patch \ - %D%/packages/patches/libgda-cve-2021-39359.patch \ + %D%/packages/patches/libgda-CVE-2021-39359.patch \ %D%/packages/patches/libgda-disable-data-proxy-test.patch \ %D%/packages/patches/libgda-fix-build.patch \ %D%/packages/patches/libgda-fix-missing-initialization.patch \ diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm index 77a0633b50..9b26819261 100644 --- a/gnu/packages/gnome.scm +++ b/gnu/packages/gnome.scm @@ -13653,7 +13653,7 @@ (define-public libgda name "-" version ".tar.xz")) (sha256 (base32 "0w564z7krgjk19r39mi5qn4kggpdg9ggbyn9pb4aavb61r14npwr")) - (patches (search-patches "libgda-cve-2021-39359.patch" + (patches (search-patches "libgda-CVE-2021-39359.patch" "libgda-disable-data-proxy-test.patch" "libgda-fix-build.patch" "libgda-fix-missing-initialization.patch" diff --git a/gnu/packages/patches/libgda-cve-2021-39359.patch b/gnu/packages/patches/libgda-CVE-2021-39359.patch similarity index 100% rename from gnu/packages/patches/libgda-cve-2021-39359.patch rename to gnu/packages/patches/libgda-CVE-2021-39359.patch From patchwork Sat Oct 26 22:41:02 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69477 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 9668227BBE2; Sat, 26 Oct 2024 23:42:58 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED,URIBL_SBL_A autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 1C31F27BBE2 for ; Sat, 26 Oct 2024 23:42:58 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUM-0007hG-BL; Sat, 26 Oct 2024 18:42:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUK-0007gZ-MC for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUK-0006zW-DZ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=SdSOrovg3XzSwWEhw5EJDTg6zZq4G/rkwuvV71g5eb4=; b=U5IluV1roDKbktVZaEjerooTxV4ZNmris1gkQ6ypoZCn1Dr32Fk8MNmymPRhdN7iEd6HcXUyvyECO4RD8EmBpWz59Wlz89TrMrsTg68VRdaiTPJUNmoUHfg0jFvbYnx5g4pjsPDUc/3ExfCapFgoz+wFYXTaGU3F+45h71Ushw0ookVl1Pju2KfCA3pG6xLUePVjPVATgiJt7KuOzKQAXbaFawD6u4KIREpwbTsjzTnMcTHizBUYlBebvgpb5AF/nSwhUId5gz1PS9viG+lZBCWG2j1++XCSTmOGBJ6M5+ZjY0NFJPpExb3g24YNkdnf13smTsuSsFbsTuS8GtzBHg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUs-0006eL-9o for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 02/21] gnu: upx: Update to 4.2.4. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253625281 (code B ref 74034); Sat, 26 Oct 2024 22:43:02 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:16 +0000 Received: from localhost ([127.0.0.1]:42898 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU7-0006Zf-JG for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:15 -0400 Received: from 7.mo583.mail-out.ovh.net ([178.32.124.100]:56627) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU2-0006Yr-Va for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:12 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.108.25.152]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQ75bCKz1RrF for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:35 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-cslht (unknown [10.110.168.217]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8A6A41FDB1; Sat, 26 Oct 2024 22:41:35 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-cslht with ESMTPSA id gQEpGR9wHWf3jAAA9nqpFg (envelope-from ); Sat, 26 Oct 2024 22:41:35 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R0045567d79c-0de3-499a-bd29-88f7c01d8cbb, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:02 +0200 Message-ID: <20241026224125.29272-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8079176260650984162 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 49 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucgoufhushhpvggtthffohhmrghinhculdegledmnecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeduteehuedtjeejteelfeduhfefvdehledtjeefgeefjeeiledufffgveevvdfgudenucffohhmrghinhepghhithhhuhgsrdgtohhmpdhgihhthhhusgdrihhonecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=SdSOrovg3XzSwWEhw5EJDTg6zZq4G/rkwuvV71g5eb4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982495; v=1; b=CPLw7KzSSs+EI2LK4SNuPafQVTPfONwsrL0zNuJmpPdqf6nugz/u342VoHANGNVQHaiElLkh FIsfyGD2RvHrIRvticOpohIq1YKGoKcoCgyY9WEKj7rY0dB8f2V2aMvb4GoQJr8r2eTiK0CZjmo LM/nl2UyY0iafb+HzXABkTKIfcICFEkzSwEOxvtbao7IJsEhm15kLiqdqOmK9oeASfHRvPtCMBu VaTgiIoAME/gtPyMt9Fp6UpnW3VE9wKXTKW/q7PZSVD/xasSMJEpbnzOnrkVeVHooG+PYovTOVC Yw80ACA8GaVZN1lR4zybRtxLYwlPCy9pd3pKfkQG30D3w== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/compression.scm (upx): Update to 4.2.4. [properties]: Add lint-hidden-cve property. --- gnu/packages/compression.scm | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index 97696ff0ef..a32b15a64a 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -2438,15 +2438,14 @@ (define-public ucl (define-public upx (package (name "upx") - (version "4.1.0") + (version "4.2.4") (source (origin (method url-fetch) (uri (string-append "https://github.com/upx/upx/releases/download/v" version "/upx-" version "-src.tar.xz")) (sha256 - (base32 - "1l273pwa573x9l3izw75cz8ysn2g8w8w3s56rahppa3ya65zg0h5")))) + (base32 "1i71p03861hlf5x1w217l67zm5inm449zhbg6kpv8zyj0wb5dmjy")))) (build-system cmake-build-system) (home-page "https://upx.github.io/") (synopsis "Compression tool for executables") @@ -2455,6 +2454,8 @@ (define-public upx compressor. UPX typically reduces the file size of programs and shared libraries by around 50%--70%, thus reducing disk space, network load times, download times, and other distribution and storage costs.") + ;; These CVEs have been fixed since 4.0.2 but are still linted. + (properties `((lint-hidden-cve . ("CVE-2023-23456" "CVE-2023-23457")))) (license license:gpl2+))) (define-public quazip-0 From patchwork Sat Oct 26 22:41:03 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69486 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id B266D27BBEA; Sat, 26 Oct 2024 23:43:27 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 84F7827BBEB for ; Sat, 26 Oct 2024 23:43:26 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUN-0007hg-2g; Sat, 26 Oct 2024 18:42:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUL-0007gj-3T for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:29 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUK-0006zd-RL for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=FfgvG5brujbl66NPXbsvGPi3WwAEZDal66D+3ElCaiA=; b=SpDKET1RqNPcwzUkTmlAdycIj8f+7sLirWcrFBn8DgD8j6g/NaiiY7FR9zXYzR9Chc1iyhMI/owxCI5h0SBn7OtArYl+ff/gnqJVcx2yK4odb04LZxpn4ojpME8OIVMXFciD6ajRy9kTDHd+STKFU3XUz7daHmIVquXikBpPINIqdnuMNoEEEDKxoqfj9XXCTBCiTeqIuEnA47UEc9VFSC75pYonc1ig02uKuwfYai01n/AqAkJz1DVV876UMGMivjF8HfPBN9PZqx/l3hoP6BDGZW4pxWYqAN0BOtuJ67K1QdeVEzfhSzpUAafOlkjf7s4TnkuIx57q8JzZOKW2Jg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUs-0006eT-O5 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 03/21] gnu: halibut: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253625289 (code B ref 74034); Sat, 26 Oct 2024 22:43:02 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:16 +0000 Received: from localhost ([127.0.0.1]:42902 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU8-0006Zi-1N for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:16 -0400 Received: from 6.mo582.mail-out.ovh.net ([87.98.177.69]:49735) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU3-0006Yx-Re for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:13 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.154]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQ839K6z1L51 for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:36 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-96gl5 (unknown [10.110.113.85]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 4B5A11FD6B; Sat, 26 Oct 2024 22:41:36 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-96gl5 with ESMTPSA id tDmLCyBwHWfedQAAgCLUrw (envelope-from ); Sat, 26 Oct 2024 22:41:36 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001b6f22026-e027-4f2c-82c0-c3b62bd2224b, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:03 +0200 Message-ID: <20241026224125.29272-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8079457735377674978 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnheptdehtedvteejgfdtfeeuveelfeefvdfhfeejleduteefffeffffggfethfejhedvnecuffhomhgrihhnpehgrhgvvghnvghnugdrohhrghdruhhknecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=FfgvG5brujbl66NPXbsvGPi3WwAEZDal66D+3ElCaiA=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982496; v=1; b=K3UXAFAJEcYxxPyy4Z4aJ0Ro9GwdIfkIyviOMuJbpZi3Iip3+TutvSaTg9HcBE64nsFUKBxg 0W+yPWoWAlkcgyc7l0FV4s2XKrMLhnSdcqc1SYF7SjU2KxmJmUIRD+Ey9zkviRZZNsRq5Gr8Yzp J8A8LJg3mQSg2YXkK62Tn0nNUNiQn8l2UGB1OGBO9H432kJ2f6TX26dnaKl6qMwn5NWFiWgxdgz 6xT0IZViCpMA6wzzqSxWXxVS+KMdMqRp0IrTrTMW7B5wukAuycUtxGRFkWiex6Wp2yLCxcYWsRt r0OoWHs1Unx8XRz1aHP2kLx/QSLxxQzC/lb2ML4sXg7rQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/documentation.scm (halibut) [description]: Reformat field to match max chars. [properties]: Add lint-hidden-cve property. --- gnu/packages/documentation.scm | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/gnu/packages/documentation.scm b/gnu/packages/documentation.scm index f0e37561f7..7522b5f769 100644 --- a/gnu/packages/documentation.scm +++ b/gnu/packages/documentation.scm @@ -264,12 +264,16 @@ (define-public halibut (home-page "https://www.chiark.greenend.org.uk/~sgtatham/halibut/") (synopsis "Documentation production system for software manuals") (description - "Halibut is a text formatting system designed primarily for writing software -documentation. It accepts a single source format and outputs any combination of -plain text, HTML, Unix man or info pages, PostScript or PDF. It has extensive -support for indexing and cross-referencing, and generates hyperlinks within output -documents wherever possible. It supports Unicode, with the ability to fall back to -an alternative representation if Unicode output is not available.") + "Halibut is a text formatting system designed primarily for writing +software documentation. It accepts a single source format and outputs any +combination of plain text, HTML, Unix man or info pages, PostScript or PDF. +It has extensive support for indexing and cross-referencing, and generates +hyperlinks within output documents wherever possible. It supports Unicode, +with the ability to fall back to an alternative representation if Unicode +output is not available.") + ;; This CVE concerns the halibut RPC-based communication framework, + ;; rather than the halibut text formatting system. + (properties `((lint-hidden-cve . ("CVE-2021-31819")))) (license license:expat))) (define-public doc++ From patchwork Sat Oct 26 22:41:04 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69487 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id C9DA627BBEA; Sat, 26 Oct 2024 23:43:31 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 89C3027BBE2 for ; Sat, 26 Oct 2024 23:43:31 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUP-0007je-IQ; Sat, 26 Oct 2024 18:42:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUN-0007i2-J7 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:31 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUN-00070M-Ap for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=0apfIMOuL3OH4CtBNGt0clAH+poalCPvbLGj3WHYhWQ=; b=N47Df6DXmGzNwxNcIsu4pNCCTQH3th2Fg35ZYm4lRCU8Sw0O0ca1Fhakgx1Rs8XsMjTA0mv/etxTJQ+2I2Fwa2ReJgPf4r2cLSvtmIy+Qog6vg3HXd3UGFUrPw9Q4G7bU8Rdt2XHhUgexV7xUFFSI+274awcdXGg+pT03De0kPEnOA8B/5kzoAdssn+tvqJQrAft0arZhSgvbLNQcThX75wbTdSk0k86tTZidvMDFycD2RvVa4oIT9esmE7wUMcfV3AP1ZBbj7AKZzxOFPqGW9HwbsiYZQVsIjO8rUQ4GKb76d68QsW4LKHo0wj2ic34MeSE37PpW21X6t27YesD+g==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUv-0006f6-7C for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 04/21] gnu: portfolio: Update to 1.0.1. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255325390 (code B ref 74034); Sat, 26 Oct 2024 22:43:05 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:33 +0000 Received: from localhost ([127.0.0.1]:42926 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUO-0006bN-MI for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 Received: from 8.mo575.mail-out.ovh.net ([46.105.74.219]:42579) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU8-0006Ze-4z for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:17 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.17.154]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQ90yPfz1jGN for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:37 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-gfxm6 (unknown [10.110.164.200]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E24341FD5F; Sat, 26 Oct 2024 22:41:36 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-gfxm6 with ESMTPSA id 5NN7KyBwHWeJYRoAozXF8w (envelope-from ); Sat, 26 Oct 2024 22:41:36 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R0019971d15a-5fdd-464e-a2e0-bae31869da0e, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:04 +0200 Message-ID: <20241026224125.29272-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8079739206705996514 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=0apfIMOuL3OH4CtBNGt0clAH+poalCPvbLGj3WHYhWQ=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982497; v=1; b=wjuOO3GgQ7KZqaWqbS56OWB/R3mzkaHY+v0+EGQRJUDvXILNcHKfyiiVwP33WlCRWm8xdTpz cAAb5gVqMa5JCZyXteryw75+k9V0deTG53xYBMrtaHglPMLjpMpYUUVlMPtMvhZ1ndnDA6oGIK+ NPmcJzaF2jRJ7I3T8AKUSWK5+mRPovp/p8YRAXcmM78YT1NL0LNX4mbxq98fPQMJ9RLwVzQ1oCt SvkwKAT0XRtSXx02+TnPFIf/SBd3OodHHiUxbUGEoICsXEOoIwD6E2YXktYXKjXufDMQoUo++qx ndoMw57fdGrziKSxRWp64IAmPVtiLXVfOvulaUgNS+ZfQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/gnome-xyz.scm (portfolio): Update to 1.0.1. [properties]: Add lint-hidden-cve property. --- gnu/packages/gnome-xyz.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/packages/gnome-xyz.scm b/gnu/packages/gnome-xyz.scm index a09c0befb0..b399d30886 100644 --- a/gnu/packages/gnome-xyz.scm +++ b/gnu/packages/gnome-xyz.scm @@ -485,7 +485,7 @@ (define-public gnome-plots (define-public portfolio (package (name "portfolio") - (version "1.0.0") + (version "1.0.1") (source (origin (method git-fetch) (uri (git-reference @@ -494,7 +494,7 @@ (define-public portfolio (file-name (git-file-name name version)) (sha256 (base32 - "1ai9mx801m5lngkljg42vrpvhbvc3071sp4jypsvbzw55hxnn5ba")))) + "1s06kd2dhsb143piw89yzwfck7qwzlh4nlgjj2bxpsa3g68c1g11")))) (arguments (list #:glib-or-gtk? #t #:imported-modules `(,@%meson-build-system-modules @@ -537,6 +537,8 @@ (define-public portfolio "Portfolio is a minimalist file manager for those who want to use Linux mobile devices. Tap to activate and long press to select, to browse, open, copy, move, delete, or edit your files.") + ;; This CVE concerns the Wordpress Portfolio plugin, not this package. + (properties `((lint-hidden-cve . ("CVE-2019-13232")))) (license license:gpl3+))) (define-public gnome-shell-extension-unite-shell From patchwork Sat Oct 26 22:41:05 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69490 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id F1B3827BBEA; Sat, 26 Oct 2024 23:43:38 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id B7C6427BBE2 for ; Sat, 26 Oct 2024 23:43:38 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007kn-7H; Sat, 26 Oct 2024 18:42:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUL-0007gz-Ju for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:29 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUL-0006zn-Aq for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=FiVAteh1S7X7aZzTY+eJ9E4SjGMJaZAuw52P/raxmOI=; b=Ffw93RJ+C8UeQpFOZHao9BGl1ak5TA6RI+cwEhcwIYA2ickkxuhDfhPzPwjZNU7EHtx/zvITH6N4DIsQMbwunWRBgircbnaNaGx+Lja8zQOu1Df+uy9OgOLTHvUeVy2A1XaxATwz47j4Do43H1pLFu41LU+n3UsQcJNQsZQZGOOfnXFG2zsdvhInmmZCl/qXJ9xOFEkRxZdybfuuURH/ulrShU6/E2qGAGb6clDAF0f6VnSUslDu+KVWB+KUxMLTS6U8kMQGNV9HnFHyBO4E8zeAfl7C7r9xtEYhrY47oywgUotxiP6PuTyScIU5WJemSma/alAoyauaAiaHE2yXyA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUt-0006ea-6U for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 05/21] gnu: folders: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253725303 (code B ref 74034); Sat, 26 Oct 2024 22:43:03 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:17 +0000 Received: from localhost ([127.0.0.1]:42906 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU8-0006Zq-IK for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:17 -0400 Received: from 1.mo582.mail-out.ovh.net ([46.105.56.136]:40393) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU4-0006Z1-Vi for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:13 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQ96JpDz1L5C for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:37 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j9l5v (unknown [10.108.42.86]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id ABA071FD59; Sat, 26 Oct 2024 22:41:37 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-j9l5v with ESMTPSA id u7pgHCFwHWeoTwAAgDeOYQ (envelope-from ); Sat, 26 Oct 2024 22:41:37 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0028b1fafb2-4b92-4cf8-813e-a9240ece5aab, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:05 +0200 Message-ID: <20241026224125.29272-5-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8079739208623252194 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=FiVAteh1S7X7aZzTY+eJ9E4SjGMJaZAuw52P/raxmOI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982498; v=1; b=WqJDvsrLyNCZtTjlJfqbFwYTUTBs+qMCneasYInoo81l56CPjTcpYtbXql0kLvl5uEhYI7Lc 4Gw+D5mo1hARVDQ2VnUHaIu39w6XlBz7BvkHxUpqwRnRHOYUO00Zucdo450ReJ0PVCIFupZaCv+ XW77701nXPkYQG+Liv/NFkRbEcGnoJ4owuaqHD/9vk1IABNQMr9C2aJJnqo1V7xWuZJ33eWuIvi tqVey6NNn9hTFKQgQ21aFRIswn+XuqhnQfvvhtoQZnQleM1l6QfvS/0QrfpOGOLfAm0Nbc6SjMv 6UPqkHbfvhYHuVgKLrY/wacYk6PIwjkHiXbXfsRTgtexg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/esolangs.scm (folders): [properties]: Add lint-hindden-cve property. --- gnu/packages/esolangs.scm | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/gnu/packages/esolangs.scm b/gnu/packages/esolangs.scm index 796f8d3f23..b29787e7bf 100644 --- a/gnu/packages/esolangs.scm +++ b/gnu/packages/esolangs.scm @@ -117,6 +117,14 @@ (define-public folders (description "Folders is a programming language, in which programs are encoded as (nested) directories. Note that the switches you pass to @command{du} may affect your score when code golfing.") + (properties `((lint-hidden-cve + ;; These CVEs concern... + . ( ; ...the Wordpress Folders plugin + "CVE-2023-40204" + ;; ...the Jenkins Folders plugin + "CVE-2023-40336" + "CVE-2023-40337" + "CVE-2023-40338")))) (license license:expat))) (define-public shakespeare-spl From patchwork Sat Oct 26 22:41:06 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69482 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id EE4D527BBEA; Sat, 26 Oct 2024 23:43:12 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 4050027BBE9 for ; Sat, 26 Oct 2024 23:43:12 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUN-0007hx-Af; Sat, 26 Oct 2024 18:42:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUM-0007hI-D4 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUL-0006zx-T5 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=Wc1eiwmHQ9z/J+PyTXQX0rSOj7MBiV8fg5viG9vf2wg=; b=nOklKy2a5Ze1KAYZZTOMjUuNE5Qx9LWasw41MIB0NzUNaTC2dsZFpEjKqnK8rATNKyTOiAT5xEWVn4oY8Alzy5r3OQB4twamdR0mIsWMUpUohi7Yioqstoc85z0SCURLOODxOdOewmyQK7tbxrqlOy9PBtqWm655hdp5AW6QnRjDTWQOkCCHqmYd2cYBSqlM8Hx2TN1WtnyoQ47tkTi0WFRqmUU7wgTIz85LpWY2X69ov3/A9aL3oF5gmWusNfO1cIlvG8QsIvsfIUJC16L3peF9B/m8qedQwBVbC4qMDeXLinUkHQ7Hl1l40FSqb6WcXGBWsNoPo0qo8Ba5XUHL6Q==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUt-0006eh-M4 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 06/21] gnu: spectra: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253725312 (code B ref 74034); Sat, 26 Oct 2024 22:43:03 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:17 +0000 Received: from localhost ([127.0.0.1]:42908 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU9-0006a4-6b for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:17 -0400 Received: from 7.mo583.mail-out.ovh.net ([178.32.124.100]:48915) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU5-0006ZK-P3 for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:14 -0400 Received: from director2.ghost.mail-out.ovh.net (unknown [10.109.140.54]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQC19KXz1RrF for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:39 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-c258q (unknown [10.108.42.86]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id D69C91FD3C; Sat, 26 Oct 2024 22:41:38 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-c258q with ESMTPSA id et/9DiJwHWeRGQAACmcwzw (envelope-from ); Sat, 26 Oct 2024 22:41:38 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G0032749ea1a-9db3-4c82-af85-934962bb6d5b, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:06 +0200 Message-ID: <20241026224125.29272-6-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8080302157821895394 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekfedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Wc1eiwmHQ9z/J+PyTXQX0rSOj7MBiV8fg5viG9vf2wg=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982499; v=1; b=dDo+gNmD7hcqz2v2RyySHTZPwDxWk96HprZqjptff1oCFBa6QcF2HgfWB3da1XVLTEeMJKa/ ENYU5Kvt+BPmqfBN/CKkvMM+nTQ3a1Ha2PdlkWFW2SDpTpzo6KCc4RDIA4p0b/yDcC4lHRdHfZn VXtferCHIFf4+DJYAVj2vIy35rwOfWoftExApc2PvNKXVRnA9FvSIUj8jaNqgo9WUy57m53VqZq qBBJsR+xDnlJYS7ExoIeeBvnDzruuJstbQjS64c2rqLSUHGb+cYZlvoUARD2xmwForZq9UtngVL nUSM2qbKcV9Efyroaf/y1U/i9XLPVL/91WtSQhuIPUdPg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/algebra.scm (spectra)[properties]: Add lint-hidden-cve property. --- gnu/packages/algebra.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/algebra.scm b/gnu/packages/algebra.scm index 2187cd062d..cb390ea976 100644 --- a/gnu/packages/algebra.scm +++ b/gnu/packages/algebra.scm @@ -1317,6 +1317,8 @@ (define-public spectra built on top of Eigen. It is implemented as a header-only C++ library and can be easily embedded in C++ projects that require calculating eigenvalues of large matrices.") + ;; These CVEs concern the Wordpress Spectra plugin. + (properties `((lint-hidden-cve . ("CVE-2023-36676" "CVE-2023-49833")))) (license license:mpl2.0))) (define-public gappa From patchwork Sat Oct 26 22:41:07 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69495 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id E4BA527BBE2; Sat, 26 Oct 2024 23:43:44 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id ADB9127BBEA for ; Sat, 26 Oct 2024 23:43:43 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007k2-Db; Sat, 26 Oct 2024 18:42:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUM-0007hM-Mr for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUM-000702-ER for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=493PRSLW/WlZlGr0AqIydlbrFb2xwGUZmSPXN8MFFKU=; b=BnXJ7IRua0YsH9MsLHNdqVBVvDqXj4sLXtbN5q41iUpmKDzTx02TSfEpJZklXciRKnS1gXlqs2N/eGwzhEA4mtu1wtaRUf7kiGHZkszdjyFwwXbtWjTvY4k2Yq3Qnd58+6W9fJbdPcniEt6gaHgZTE25YgdCxRZBQ46ZnZa/U/cVJperQLwVtcJZQ1QOcg4wKDwId24yS5psgQb68SEr88hHIw17uhZfSpjbg30B0QgLysTv4AqUOn8ggnLgFxIqDXs66ORXvBRI7wN2l+CBXrN1M/pKtRJv+hKBJSRJ8mQ1RqLRO3VRQn/c2rKqdhHFpZnhB0IN6MU9oITv+k2amg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUu-0006er-Am for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 07/21] gnu: express: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998253825325 (code B ref 74034); Sat, 26 Oct 2024 22:43:04 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:18 +0000 Received: from localhost ([127.0.0.1]:42910 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU9-0006aD-Mm for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:18 -0400 Received: from 1.mo582.mail-out.ovh.net ([46.105.56.136]:45823) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU6-0006ZM-5K for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:14 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQC4llpz1L51 for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:39 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-pfxjl (unknown [10.110.96.84]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 837E11FD59; Sat, 26 Oct 2024 22:41:39 +0000 (UTC) Received: from ngraves.fr ([37.59.142.105]) by ghost-submission-5b5ff79f4f-pfxjl with ESMTPSA id f5VEGiNwHWcbJR4ALqpFYw (envelope-from ); Sat, 26 Oct 2024 22:41:39 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-105G006b53f5131-6399-4553-9822-a020432482e9, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:07 +0200 Message-ID: <20241026224125.29272-7-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8080302157182722786 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdehnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=493PRSLW/WlZlGr0AqIydlbrFb2xwGUZmSPXN8MFFKU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982499; v=1; b=bvv7eeWXT3t8MXTsrnzhVkGDsY59rXVnplhcCu2WzcbXMlRy236OxTB/QJnYUPW5CnSs4ZVA Lrhz5ziVDTbLf08kGI29Lb+cjWt/SurWQJT4V3u+MRl/OR1n8GmSGSmJbmHc2vdb6MVT+JEhWU+ o5gtcqmCrfU0nuRh9MH4ndSERagyUslY8q9sKTksz3B6C+FAO38Zz3tnqW9BNIRGCtwIXd+kQSI 9F37PATae5KZKn7FtIEo0QIQj8aETSrmwF6j4ToCVuF8+48sL/HXpRbgLOKckPXbLOUk/hlKgw7 3F0hgt9AcA6Boimzcc4emteiU+YvI5RHRJfc7kEfsmRFA== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/bioinformatics.scm (express)[properties]: Add lint-hidden-cve property. --- gnu/packages/bioinformatics.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/bioinformatics.scm b/gnu/packages/bioinformatics.scm index a2ffbd5155..2f463c8969 100644 --- a/gnu/packages/bioinformatics.scm +++ b/gnu/packages/bioinformatics.scm @@ -6924,6 +6924,8 @@ (define-public express transcript-level RNA-Seq quantification, allele-specific/haplotype expression analysis (from RNA-Seq), transcription factor binding quantification in ChIP-Seq, and analysis of metagenomic data.") + ;; These CVEs concern the Express.js node framework. + (properties `((lint-hidden-cve . ("CVE-2022-24999" "CVE-2024-43796")))) (license license:artistic2.0))) (define-public express-beta-diversity From patchwork Sat Oct 26 22:41:08 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69483 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id AF0CA27BBEC; Sat, 26 Oct 2024 23:43:12 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id E16A427BBEA for ; Sat, 26 Oct 2024 23:43:11 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUO-0007i9-5h; Sat, 26 Oct 2024 18:42:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUN-0007hq-53 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:31 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUM-00070D-T7 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=gBZgGPw2vXeAjVhVliRis0+loINoO56cjInABkQ8ajc=; b=TCKeAbAUryewRPWXXc23gbxfNPo/HJ67wZMYnPxCEkriH7BVzbKppj0ZQwIOzle44MO8egkWUSj8gsopit/gzUMaGVfSJvptsgLlbJ0WwjdJZVSi3n3Y54H3yBDuR3+sbaSJZqXPniN184kELOVO4gibjcWj2YfK1hnPwMr3yCJ+tQMIs/sL9SluNDvoOf32Jgnz9/tZ2ZegPpjAf+ts/XKt0HrOJv1dk0f2f1F35fxfNbgdrtMwGH+jpBYp7gwHZggcTV+GaUvlCkilNXmVGolpkpfsg8V1E8Bln/oosq/2goipjzM3fybz2uTeiawXskCEtLT9tLUfjhY0oQcZfA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUu-0006ey-Oy for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 08/21] gnu: cli: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255225384 (code B ref 74034); Sat, 26 Oct 2024 22:43:04 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:32 +0000 Received: from localhost ([127.0.0.1]:42924 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUO-0006bK-Ab for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 Received: from 14.mo583.mail-out.ovh.net ([188.165.51.82]:58481) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pU7-0006ZX-L6 for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:16 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.108.2.97]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQD1Z1Jz1Qy0 for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:40 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-x64g7 (unknown [10.110.113.85]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 113311FD59; Sat, 26 Oct 2024 22:41:40 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-x64g7 with ESMTPSA id u+DmOSNwHWfohwEADYdkGQ (envelope-from ); Sat, 26 Oct 2024 22:41:40 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G00579a3a523-bf84-4013-8c57-e4bcc5c0562c, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:08 +0200 Message-ID: <20241026224125.29272-8-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8080583634506801890 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkedvfeeftefhtefhveejfefgfeejlefhffeihfejudelhfelueffgefgkeeljeeinecuffhomhgrihhnpegtohguvghshihnthhhvghsihhsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=gBZgGPw2vXeAjVhVliRis0+loINoO56cjInABkQ8ajc=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982500; v=1; b=bNBjTRFK4E0yz0VqgRqgGUK/pVcPVOkViRHXxxWvb6Kg405sn2JE8FNEUZvnEMtG7yK04tya zSnLOVjIvckWsZY10zijQtb0orIzup/YhMZjQCPyJ/W0KDL3hU0GDQv53x5IlsMKqFoH0WjKMLG a5cDYk3KmhK6AeUI2gvu68hBGjdfQbNQS5+DcKt9w/u3mt22IzdNLQndqpScot7cTT+p3gnubld +xMflP/ymTZ00iZE8W1r+bjDQFZ3iWig7WyBGJJ7+eWiOq3Q6DcODfLjOpZG+LyBBIprGvdeA4r raStdhc9Jn0+hbmWK8xaZAYq3ALJInTIeXuHNMFAys+Hg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/cpp.scm (cli)[properties]: Add lint-cve-property. --- gnu/packages/cpp.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/cpp.scm b/gnu/packages/cpp.scm index 26fc169154..e9c6dc096b 100644 --- a/gnu/packages/cpp.scm +++ b/gnu/packages/cpp.scm @@ -2304,6 +2304,8 @@ (define-public cli options that your program supports, their types, default values, and documentation.") (home-page "https://codesynthesis.com/projects/cli/") + ;; This CVE concerns Snyk CLI rather than this package. + (properties `((lint-hidden-cve . ("CVE-2022-40764")))) (license license:expat))) (define-public xsd From patchwork Sat Oct 26 22:41:09 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69500 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 4874227BBEA; Sat, 26 Oct 2024 23:44:07 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 15BE727BBE2 for ; Sat, 26 Oct 2024 23:44:07 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007l2-Qm; Sat, 26 Oct 2024 18:42:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007kh-SN for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUQ-00071B-Jk for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=U7IPqYTztHSExI8TRiDVNSgVPhQ+jyRyJHvaQyxRcdA=; b=FUUArss5tZE1fNnKfaotl2oCt275y3WbDojL2kTVcKv6IsCjLEqtwgb0TqsC98a0rT/cl/bKeX5Pgt9YeKe2rVbUEGCb6Wn+y6CocyiAqR6Fn/+vuk8fvXmNr5qJFSGIZQpECqLFIhau1AVWrujkcC739FH7KTO/w+tua4+Vz2qyr3ElT8IAypld7P3i6jUS1zuxoGd35IMQtSNJink5XlqGyyqRomm6Zj3OQFADm8GjausrKqhEFT+LDQzE/ji+QIG+8YtTXQLqDF1J1TlpZPOCLrpmAjG62o5DxOXQTa71zcKUv2fVgWojE39l7WKyxlO/9R/eQiiPwBqIdjYKFQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUy-0006fw-GH for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:08 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 09/21] gnu: h2c: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998257825517 (code B ref 74034); Sat, 26 Oct 2024 22:43:08 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:58 +0000 Received: from localhost ([127.0.0.1]:42954 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUn-0006dT-OP for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:58 -0400 Received: from 8.mo575.mail-out.ovh.net ([46.105.74.219]:46041) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUR-0006by-Eq for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.148.175]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQF17XJz1jGy for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:41 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-76zrf (unknown [10.110.113.134]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E149E1FD2C; Sat, 26 Oct 2024 22:41:40 +0000 (UTC) Received: from ngraves.fr ([37.59.142.105]) by ghost-submission-5b5ff79f4f-76zrf with ESMTPSA id FxFWJiRwHWfkGx4Ayyemgg (envelope-from ); Sat, 26 Oct 2024 22:41:40 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-105G0062e3654c0-a96b-4869-b150-bf056dbd4824, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:09 +0200 Message-ID: <20241026224125.29272-9-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8080865107735732962 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdehnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeehpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=U7IPqYTztHSExI8TRiDVNSgVPhQ+jyRyJHvaQyxRcdA=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982501; v=1; b=BLEMCgCIct1ljQvr4su9phnp5OytqRpLmhFz+cnWsAQ5klMUHv823veRD2mPDwmPMx6XwRz5 5VipqX+joXB+eXa5VX2UuNk/zr3L9PHNuKvKQGyh4EnRP+/B2mZvYh7/CV31W9DMOb/GBrmIHP9 Ukeb98FI7laptmUAKhY64G4HQIeu3TAlWOcFU5DBnGXoiW/SfhiMf/RYT+I6VJg1jv/mdXlfjDs Pqjr6VPkAy+bXiclLbPVEHv7FhI2HZ9Hjl6J9cd2kRU3oBgXV3El7mUmj34rfHgZ6VYpQsZ+PZk 59AuiM5xTzvA6xQ3XxzzuaPudhIEwXiFRkokA6ubzs6GA== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/curl.scm (h2c)[property]: Add lint-hidden-cve property. --- gnu/packages/curl.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm index 9f74018205..bac1841c82 100644 --- a/gnu/packages/curl.scm +++ b/gnu/packages/curl.scm @@ -366,6 +366,8 @@ (define-public h2c (description "Provided a set of HTTP request headers, h2c outputs how to invoke curl to obtain exactly that HTTP request.") + ;; This CVE is for the h2c function in Go. + (properties `((lint-hidden-cve . ("CVE-2022-41721")))) (license license:expat))) (define-public coeurl From patchwork Sat Oct 26 22:41:10 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69475 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 99C4827BBE9; Sat, 26 Oct 2024 23:42:46 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 65C7E27BBE2 for ; Sat, 26 Oct 2024 23:42:45 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007jz-Ay; Sat, 26 Oct 2024 18:42:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUO-0007iE-2c for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUN-00070T-Po for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=2UV1z9d3uYCHLEOjXHxjnbrpyAsMwGh23vTLka3nr9w=; b=aFEK7GKXSIwPh/0PRYd0cgtAfZPR2+GnYCbS24gmtaYVO2VGmBRDUOQcOQ6LNKh4JOaVCDheh7wKFRRtUn2D1k1kee05d0gUXZkEJBoKkjpX5Yw9Z7GkNbj6oChiuixEBT3SRWte8hh0hAas3fBcmpEkFdO/a/IcO4vROaNmOh9KRtzB5OvSbltJJkdEFcnowGYFl+ythicynjqAUilPvpszGzwxlGUcIW8qjmr7zOrOnFgIUNUIyUlGTWwnFEbAmCmAu6wLx54M9B0o3kP97z7hiUlcEXB5RBB7H4D/vTxNobdMLcONM1AcqWsxH09UdtJFii8NbXmArkhGtlfHMQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUv-0006fD-LU for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 10/21] gnu: xenon: Update to 0.9.3. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255325398 (code B ref 74034); Sat, 26 Oct 2024 22:43:05 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:33 +0000 Received: from localhost ([127.0.0.1]:42928 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUP-0006bY-2l for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:33 -0400 Received: from 8.mo561.mail-out.ovh.net ([87.98.172.249]:37717) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUA-0006aP-Vb for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:19 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.109.148.20]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQH6Rktz1PlK for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:43 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.178.196]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id AF57B1FDE6; Sat, 26 Oct 2024 22:41:43 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id vsklIydwHWdlAhIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:41:43 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0021c13e636-8d10-4218-81af-acc10ce3e500, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:10 +0200 Message-ID: <20241026224125.29272-10-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8081428058462610146 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=2UV1z9d3uYCHLEOjXHxjnbrpyAsMwGh23vTLka3nr9w=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982504; v=1; b=TBAJxcsIYWWkHjw9wJtAmEHYTq8wEsJxjWEmwxxlOZ47u8jXBn4AR+d2ABYbUHq3zkDqhdyf EMpUEtXRSl7FmaXoD+Wips22L3aKMPm/vfNI9JoFFSHvhp2Ws14IHadHM2mWEogZD2cFPERmNXY XTsu7SB4SX0bQmwqoja+dtz503FqNO5ASDFUsgL/9kw3c4YuCqRufnHhU5H76ftbJglEJGlNMPm 4JoY9sM1hVt4xpl5gAh0FcKpUx/gWnYc1UDSqteFRPh7yB07wz7ImbR2KhwNszWOWAM1Y6uyq4c 7ceClwrmyhcP9rpNK4VwwW/fk6fbUyL+H5GEMlac+OBuQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/code.scm (xenon): Update to 0.9.3. [properties]: Add lint-hidden-cve property. --- gnu/packages/code.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index 3f7a6de478..bbf10be987 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -1077,14 +1077,14 @@ (define-public cscope (define-public xenon (package (name "xenon") - (version "0.9.0") + (version "0.9.3") (source (origin (method url-fetch) (uri (pypi-uri "xenon" version)) (sha256 (base32 - "1f4gynjzfckm3rjfywwgz1c7icfx3zjqirf16aj73xv0c9ncpffj")))) + "1yj31bqz2bphvvyb0jkas7bxc2rw76rf1csz0mwmvah8pbc3hxaa")))) (build-system python-build-system) (arguments (list #:tests? #f)) ;test suite not shipped with the PyPI archive (inputs (list python-pyyaml python-radon python-requests)) @@ -1096,6 +1096,8 @@ (define-public xenon line options, various thresholds can be set for the complexity of code. It will fail (i.e., it will exit with a non-zero exit code) when any of these requirements is not met.") + ;; This CVE is for another package named Xenon too. + (properties '((lint-hidden-cve . ("CVE-2023-39427")))) (license license:expat))) (define-public python-xenon From patchwork Sat Oct 26 22:41:11 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69491 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 2305D27BBEA; Sat, 26 Oct 2024 23:43:41 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 5A58327BBE2 for ; Sat, 26 Oct 2024 23:43:40 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007ka-P1; Sat, 26 Oct 2024 18:42:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUO-0007ip-Gs for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUO-00070f-8R for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=tOpxwgXb+22fczCQLdlZBnBA9Ygvb9DrmMyDU38k5C4=; b=XJINRj8QGD4pqbYDcOc9meyRXchVtfRZv5qwcUwK8IPbAaPXGSVrZq5haN0pmTVdWihVOIqoXwj429thKW1poFNPrnM4x+ZpU5IttE1TsLXbAOWd0ZfU63nzjqxGLebsHIRCKmEbfT4raQZYFa/h8n/qjqUlaob/oKyWiILVr7KnKDM/NaXugRCMxuzjTxJieTGltp4zbhi1DvT+g17vU5YqmHS44ubyiF4jD4XkKEB9nTj9yKCIaOQtyNs+GKqtk25MSQ8x9K/3Pq3VvZV7kGgtafU7tS6mvRfrcoP+JkUxYounxDc1i6HlloMPlQg7wRIo/o4Svn9/qzC5INlYcQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUw-0006fL-4H for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 11/21] gnu: bolt: Update to 0.9.8. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255425406 (code B ref 74034); Sat, 26 Oct 2024 22:43:06 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:34 +0000 Received: from localhost ([127.0.0.1]:42930 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUP-0006bd-F1 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from 15.mo550.mail-out.ovh.net ([188.165.38.232]:37937) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUC-0006aX-2Z for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:21 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.25.152]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQJ5bftz1RYP for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:44 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.118.167]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 637C51FD18; Sat, 26 Oct 2024 22:41:44 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id nctgEChwHWdqAhIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:41:44 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R00661522e1b-861a-444b-ac23-7126636759e1, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:11 +0200 Message-ID: <20241026224125.29272-11-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8081709534016627426 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleegveeuhfdukeeghfelhedugfefkedvgfffjeffkeekgfegheevleeutdduleeunecuffhomhgrihhnpehfrhgvvgguvghskhhtohhprdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=tOpxwgXb+22fczCQLdlZBnBA9Ygvb9DrmMyDU38k5C4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982504; v=1; b=QOU5tRtzZppc2s8wkW/NLOVrH9DA38HxP5QqzXhR54JA7X04rrBy1QdK/Y0hUBspGKWhBOJc oU5K6lj2Je4ifY1ukQ6tguKID1qlo39e3bF6Ds19zOSBXQ/lKxymuuZRSbl2sfBIQkV/o5PwApS i9ff+1mSZK7A2W5DOZ3UMpdf9jYvK8wiUiAQ+zBTC5OsmKHSM5WLl+gW1kZM8ZZsDbH0bMHrpEI TM97h9NAHqgI+xyhSe6avF596va8YIEC1dG4IOgmoeCOxyfKxTLqowaTLWFNt9/qISgEcNGWZUP zkpKJjPy9HLqiIXKcWnA45q5ytQ41WIo8c2ConaFGUsHw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/linux.scm (bolt): Update to 0.9.8. [arguments]<#:phases>: Update phase 'replace-directories. [properties]: Add lint-hidden-cve property. --- gnu/packages/linux.scm | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index e496f3c88d..f9f13ca28a 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -3366,7 +3366,7 @@ (define-public iptables-nft (define-public bolt (package (name "bolt") - (version "0.9.5") + (version "0.9.8") (source (origin (method git-fetch) (uri (git-reference @@ -3375,7 +3375,7 @@ (define-public bolt (file-name (git-file-name name version)) (sha256 (base32 - "1b9z0sfrz6bj0mddng9s0dx59g9239zmrl03hxx2x88mb7r0wmcg")))) + "1i9nyvx3qcf4m607qmpklpl9xqzsh423k8y3fr6c5n0k4ajy4cxh")))) (build-system meson-build-system) (arguments (list #:configure-flags '(list "--localstatedir=/var") @@ -3384,12 +3384,11 @@ (define-public bolt (add-after 'unpack 'replace-directories (lambda* (#:key outputs #:allow-other-keys) (substitute* "meson.build" - (("udev.get_pkgconfig_variable..udevdir..") - (string-append "'" - #$output "/lib/udev'"))) - (substitute* "scripts/meson-install.sh" - (("mkdir.*") - "")))) + (("udev.get_variable\\(pkgconfig: 'udevdir'\\)") + (string-append "'" #$output "/lib/udev'")) + ;; Don't install in /var + (("not systemd\\.found\\(\\)") + "false")))) (add-before 'install 'no-polkit-magic (lambda* (#:key outputs #:allow-other-keys) (setenv "PKEXEC_UID" "something")))))) @@ -3411,6 +3410,12 @@ (define-public bolt @command{boltd}. It can list devices, monitor changes, and initiate authorization of devices.") (home-page "https://gitlab.freedesktop.org/bolt/bolt") + (properties `((lint-hidden-cve . (;; These CVEs concern... + ;; ...the Bolt PHP cms + "CVE-2021-27367" + "CVE-2022-31321" + ;; ...the Bolt orchestration tool + "CVE-2023-5214")))) (license license:gpl2+))) (define-public jitterentropy-rngd From patchwork Sat Oct 26 22:41:12 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69479 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id AFCBD27BBEA; Sat, 26 Oct 2024 23:43:01 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 2617B27BBE2 for ; Sat, 26 Oct 2024 23:43:01 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007jp-3B; Sat, 26 Oct 2024 18:42:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUP-0007jH-4J for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:33 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUO-00070l-SF for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=rctlaM9g8p9JdUyaMWubQs6dbqjhRRamb7StKiDd9Xk=; b=RqUZkMX6AKlj1WlxRVZ6QVNF9HLf0xCFleXngmAUmdQH2BWSQAG7B5ygdiZWUMwd9GMr9vWQfV6HfgfIZhCpZnQPrmwjiw2vfj3CqsKeDfe5su8WhZ3gB7roIT8y+sANimINwBy2WQUCXVAvfPoLr+FZ4c8mgiTewL6XWCfR1UnDet8jnnlzNRs9ZWbtN1fRL7rckBO8nwso6dn4HG3Q+A1zmYm4izuHMShMGr3XmI22ufWSmSSfye0sAtAtAbIGx47lmj/uDvxyfJWcmRbqAdZ66GIzZUWC8Q79Nqfs7R5g4Lf3E/tG8B3AurKkcWQa9P4OTN/bMVzGMmhrcUo75g==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUw-0006fS-JH for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 12/21] gnu: sylpheed: Add release-monitoring-url property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255525415 (code B ref 74034); Sat, 26 Oct 2024 22:43:06 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:35 +0000 Received: from localhost ([127.0.0.1]:42932 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUQ-0006bj-Dz for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from 6.mo560.mail-out.ovh.net ([87.98.165.38]:38495) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUD-0006ae-1p for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:21 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.108.9.73]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQK4543z1ZK0 for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:45 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.168.242]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 389331FDF6; Sat, 26 Oct 2024 22:41:45 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id +psQASlwHWduAhIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:41:45 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R0034837f0b3-d305-4923-b562-25f91234c1d8, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:12 +0200 Message-ID: <20241026224125.29272-12-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8081991009654596322 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhephfetieegffdtvdekueffgefgudeuudeghfevvefhfeeljedtgfelvdfgvddvhfeknecuffhomhgrihhnpehsrhgrohhsshdrjhhpnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=rctlaM9g8p9JdUyaMWubQs6dbqjhRRamb7StKiDd9Xk=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982505; v=1; b=p+RkxratF5Z5bckCZBdFUFudzmQvBGy0JUjA+TqfaGaZ8KXUEeDO9W0rrXkZDnulF41LLqpK SYNg+rEygi9Y+frc9AylkKaufltF6NDxx9j1t3vg3rq1aMnl1L/SZjsup5S15jhGzXeDOdHG/yi F9GRcfwcI4KMVHG0q4+mU86I2IvLyHLCfDXy9NifP7H0+A+jIi+AsKjLJvMsOYQGG3ciZNuiswc +/VKp9j2Qmphp1h0+PQ8s6udV2csfXEVueVoLBtbOPjdqovwmh/javhHuddzFazGRO8HjWQq5Oo kWcDRgPJ6RSdU6Ztn4mJxaotlwdEWUc6godU6JnAKadyA== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/mail.scm (sylpheed)[properties]: Add release-monitoring-url. --- gnu/packages/mail.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 2c69a7b818..77be7626a9 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -4561,6 +4561,8 @@ (define-public sylpheed "Sylpheed is a simple, lightweight but featureful, and easy-to-use e-mail client. Sylpheed provides intuitive user-interface. Sylpheed is also designed for keyboard-oriented operation.") + (properties '((release-monitoring-url + . "https://sylpheed.sraoss.jp/en/download.html"))) (license license:gpl2+))) (define-public python-authres From patchwork Sat Oct 26 22:41:13 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69493 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id C5AF727BBE2; Sat, 26 Oct 2024 23:43:42 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED,URIBL_SBL_A autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id B951727BBEB for ; Sat, 26 Oct 2024 23:43:41 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007kk-76; Sat, 26 Oct 2024 18:42:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUP-0007jd-GY for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:33 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUP-00070u-84 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=/x9u0JIjOeaWQLB1Ah6Ea/7ejeomp9hDtrHIEj5t0uU=; b=sIK5uG3rYQLTqIXK2rhM0bIKxWLgRUlP4ggQkSd+N2QUCtNV2rr7Fbm3NSGIlwhxJQWcpZ9JTXDS5rdkShwLzDqWaJtFsywEqfQms/iWLYYmG56Qv6cKlypVHdqYo0vX7kxv7t9KUZMutypBbCA3ePI4DJVmt7Eg/f0zcKUa9ljEcnDuGlh5s+Msvh0hFdLK9aKlMcm5mccur7JkxjHvCNegtBQ79UzV6CMOdI/+tol0uRD8AFz3in4xGn0CS54pIDMN/DpsD1fGgTaBo6IwxkvGCrhcDLWky920cJ9YCZYB1X+MnSKs4xRtWNcxu9Q22w06Xhi30g9r5F/bAcIYRA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUx-0006fa-4t for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 13/21] gnu: openvswitch: Update to 3.4.0. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255525423 (code B ref 74034); Sat, 26 Oct 2024 22:43:07 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:35 +0000 Received: from localhost ([127.0.0.1]:42934 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUQ-0006bs-UF for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 Received: from 7.mo576.mail-out.ovh.net ([46.105.50.32]:42661) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUE-0006ar-Tm for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:23 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.109.176.72]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQN2XQwz1spS for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:48 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-75tfv (unknown [10.110.164.155]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 163AD1FD18; Sat, 26 Oct 2024 22:41:48 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-75tfv with ESMTPSA id 2K/kOStwHWfKXRoAHczbNw (envelope-from ); Sat, 26 Oct 2024 22:41:48 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002542ddf2c-8980-467f-8b97-881547ce2780, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:13 +0200 Message-ID: <20241026224125.29272-13-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8082835434536493794 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjefhtddttdelffevkeejteettdeltddufedthffgudejhfeutddvleehvddvnecuffhomhgrihhnpehophgvnhhvshifihhttghhrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=/x9u0JIjOeaWQLB1Ah6Ea/7ejeomp9hDtrHIEj5t0uU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982508; v=1; b=BINWF8v/FEMrvWM+rtHnY9FpjXRm365qqhFVC74TN0GCCMMHZo1dUEuIYsd1zxMrVJUOjL7V QYUTuMv3XyAvTHgWF+iXkbXNjed8L8YvAt+hV200sQ1ezUfrkDK7jMOK0s8cvLBQ3hnVCD8xEZ3 Qc88k4uoebzUKPH3UQIdYY4XPrQJcrOYAUY9PARbD100xRY9NzCXmSfm8Eg6f+bhdjV3oFq0x9z 8Zp3ZLY3+51n700EYqpeobjdoyiVeXJx7KSqy/P3RFBwP82fq4krYqiq4bqDwJV1v2AFUXBXQ50 u/ebv0OhnQ2axuKLoxKbzf6aF5S2eWzEnVswyGRcRXKxg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/networking.scm (openvswitch): Update to 3.4.0. [properties]: Add lint-hidden-cve property. --- gnu/packages/networking.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index a56b574e97..d98179cf2f 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -2877,7 +2877,7 @@ (define-public nzbget (define-public openvswitch (package (name "openvswitch") - (version "3.2.0") + (version "3.4.0") (source (origin (method url-fetch) (uri (string-append @@ -2885,7 +2885,7 @@ (define-public openvswitch version ".tar.gz")) (sha256 (base32 - "1i0lb40lwbakmmqklmfcgr01l1ymsawgdi7k9a1zzp8ariw7x4ff")))) + "10g84h6lis6fafyjhvmdrs8r539xcar04cc3rsk448gs6848hsqr")))) (build-system gnu-build-system) (arguments '(#:configure-flags @@ -2961,7 +2961,9 @@ (define-public openvswitch supporting standard management interfaces and protocols (e.g. NetFlow, sFlow, IPFIX, RSPAN, CLI, LACP, 802.1ag).") (properties - '((release-monitoring-url . "https://www.openvswitch.org/download/"))) + '((release-monitoring-url . "https://www.openvswitch.org/download/") + ;; This CVE is fixed since 3.2.0. + (lint-hidden-cve . ("CVE-2023-5366")))) (license ; see debian/copyright for detail (list license:lgpl2.1 ; xenserver and utilities/bugtool license:gpl2 ; datapath From patchwork Sat Oct 26 22:41:14 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69497 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id EF3AF27BBE2; Sat, 26 Oct 2024 23:43:49 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 85A7E27BBE9 for ; Sat, 26 Oct 2024 23:43:48 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007l9-Vi; Sat, 26 Oct 2024 18:42:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007jn-06 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUP-000711-O0 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=SMfG3752rvC1nWGnWmHVkMGgjp9c3l6Ami0Ypxii/Ig=; b=WzDXsIaOcr91+Cu/ueg6KxP0Sk4mrkUPDwKJj3NNJLem16NsTPkIY3ME7jaAih9ulANcNnZdItekHJWo8aYvXXRpv14z6wIPe0etdbBUau1G/DPIRvwgrsSRo4MhU4/aoB+jIm2XXuyfcxqKILZ/bLy3v8kKXY1OpDDR4Q9I0dU589D+xnya7+E3DH0Vj2doYqSbhwdjv0nd23pLwGE6RycknAb32a5KMN6NjxTxMmcNN3R9JJYS6plyOzoFrM5Py/ca0l551DTeGaW62SGjdSdbbZicAr3RhssWQu8dwBS29nDHbmgLN9p9qRBU9sdchSy66fEYFUK/olhzbE3odw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUx-0006fh-IZ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 14/21] gnu: quagga: Fix build and hide CVE. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255625437 (code B ref 74034); Sat, 26 Oct 2024 22:43:07 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:36 +0000 Received: from localhost ([127.0.0.1]:42936 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUR-0006c0-AY for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 Received: from 19.mo550.mail-out.ovh.net ([178.32.97.206]:59543) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUI-0006b1-TY for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:28 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.140.54]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQR5rvJz1RTT for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:51 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-ldxcz (unknown [10.111.174.155]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 724DF1FE84; Sat, 26 Oct 2024 22:41:51 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-ldxcz with ESMTPSA id r35sMy5wHWcejQAAgQkgMQ (envelope-from ); Sat, 26 Oct 2024 22:41:51 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G0048340b531-ecdc-4bb1-a31a-83b33d485245, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:14 +0200 Message-ID: <20241026224125.29272-14-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8083679859378217698 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepjefgheffteelteeuheeitddufedvlefgfeeffeejveevlefgudehhfffhedvgfeinecuffhomhgrihhnpehnohhnghhnuhdrohhrghdpohhpvghnshhushgvrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=SMfG3752rvC1nWGnWmHVkMGgjp9c3l6Ami0Ypxii/Ig=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982511; v=1; b=J//9QGCmhKyYa5NzxHwsS2/Zhgne04MLcntdNnD1lBUrMTRybbTYZImF9D6E8XUhaqKYjLku d2EShGwyLp5fuhtzcsu0QkYhePjkJK0mMPjwH/7rdDCUUSieIV5Izhgtt9gl7zNbr9W+orVcyBB Lvnl0lmllpQd6Vkpk9ozMGIhGValBVyX/Od3OiqtCUBl8ag/Uz4nlBsUeliSZgPdOY8P3pAPRI9 wVkgcXZH3TJjcqKo6MqgtG3f4UgLZwIRbvyJWUXm8sWTbetjkyhawS+3TbJmVZPAbVdsfC+Bkf8 vSJ2TFJFJbeYgg54EO0E/r8w4g5EQTGwS9M0e62nC7tLg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/networking.scm (quagga) [inputs]: Add libxcrypt. [properties]: Add lint-hidden-cve property. --- gnu/packages/networking.scm | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index d98179cf2f..53bc670c41 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -3138,7 +3138,7 @@ (define-public quagga (delete-file "vtysh/extract.pl"))))) (build-system gnu-build-system) (native-inputs (list gawk gcc-9 pkg-config perl dejagnu)) - (inputs (list readline c-ares)) + (inputs (list c-ares libxcrypt readline)) (synopsis "Routing Software Suite") (description "Quagga is a routing software suite, providing implementations of OSPFv2, OSPFv3, RIP v1 and v2, RIPng and BGP-4 for Unix platforms. @@ -3149,6 +3149,10 @@ (define-public quagga clients which typically implement a routing protocol and communicate routing updates to the zebra daemon.") (home-page "https://www.nongnu.org/quagga/") + ;; This CVE concerns systemd services files that we currently don't use. + ;; If we were to use them, a fixing patch can be found here: + ;; https://build.opensuse.org/request/show/1035188 + (properties '((lint-hidden-cve . ("CVE-2021-44038")))) (license license:gpl2+))) (define-public bgpq3 From patchwork Sat Oct 26 22:41:15 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69485 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 28A1A27BBEC; Sat, 26 Oct 2024 23:43:27 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 6B35D27BBE2 for ; Sat, 26 Oct 2024 23:43:26 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007l0-OW; Sat, 26 Oct 2024 18:42:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUQ-0007kO-Lb for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUQ-000717-6M for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=BkFyb/C7JNGAt5fl+vUUhDR+/4jsHrMtuKqA1BN4Xfs=; b=G6j7LKMpS6nGOhJdOEXLeAKnxj6iPOcH8lG0TuIVXRUWNf20zbjykdI5ItI6iZzeQ8xrhV9GxkHPPv7YtQ0ehh388n9suNfpLOK2Q6eFZ855AKWcKLqXoxXMBA/9SEFw8q0TlltY2kdnwFxh3Z0dsz3nQH1/U+FGe8Z6Pw0ka+uiGTj1T0wnQBPyHDbG4brkDn3vMVDjHQ60WCpfqrKcKdtafc5WkctPT45ICNwiU/G4uSOJ3FecFV/ixhSFZVGd096uFBLkPhc9qc1USf7zn6FvJuPz6EfWZ+P1KMUZC6WXmZUAkZaa6kamNadIy3x92ITJbw9IjxcdBQ4h/UD7Ag==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUy-0006fo-1J for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:08 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 15/21] gnu: bwm-ng: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998255625446 (code B ref 74034); Sat, 26 Oct 2024 22:43:08 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:36 +0000 Received: from localhost ([127.0.0.1]:42940 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUR-0006cE-Vq for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:36 -0400 Received: from 19.mo561.mail-out.ovh.net ([178.32.98.231]:48391) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUL-0006bB-NQ for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:30 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.2.115]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQV3vjfz1PlK for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:41:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-tb7nv (unknown [10.110.113.51]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 62C031FDE6; Sat, 26 Oct 2024 22:41:54 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-tb7nv with ESMTPSA id x0MiCzJwHWe+LgkAuXv9SQ (envelope-from ); Sat, 26 Oct 2024 22:41:54 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004cbcde470-fee3-4a1f-863e-2c31352eed37, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:15 +0200 Message-ID: <20241026224125.29272-15-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8084524281590440674 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedguddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvefhheegveefvdfftdevtdelvedvgfekheeuteeuteehhedvtedufefggffgkeehnecuffhomhgrihhnpehgrhhophhprdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=BkFyb/C7JNGAt5fl+vUUhDR+/4jsHrMtuKqA1BN4Xfs=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982514; v=1; b=EagycRKFbkrjJGe6Pt/LF2+6InmEaIOAr1p9b9QbBr4yRNy7ZgtwVWke6ktrl4TxkhZiE5eO 8WQR1/w/OlvQpZhyR4yUYQV7qRHx0feWK7BRcLA6RV+pLurxr0OYWrWl7CKfE45VobI0XTX/57e 6ToidLMaJibjE73kFwr0Tu3gkYw0sOjzA3lILu0Zme8F1VuFWokMfzdnde1gA1BJxmUP6HlLTZc vWu/VWM4Y6GM40lMsvz40+bGdVTfL7Y2od5r54bjHTQKvv3Gj6zUnz5IIne28ZcrxrH67bP32i2 WWugFwRNtszhI58MJXvBCIYSMl5zzQsPQ6FniIJG3JqDw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/networking.scm (bwm-ng)[properties]: Add lint-hidden-cve property. --- gnu/packages/networking.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 53bc670c41..7ed011a7f4 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -2152,6 +2152,8 @@ (define-public bwm-ng (description "Bandwidth Monitor NG is a small and simple console based live network and disk I/O bandwidth monitor.") (home-page "https://www.gropp.org/?id=projects&sub=bwm-ng") + ;; This CVE concerns the npm bwm-ng package rather than this one. + (properties '((lint-hidden-cve . ("CVE-2023-26129")))) (license license:gpl2))) (define-public aircrack-ng From patchwork Sat Oct 26 22:41:16 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69476 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id A553927BBE9; Sat, 26 Oct 2024 23:42:48 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id B0F5A27BBE2 for ; Sat, 26 Oct 2024 23:42:47 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUS-0007lw-QX; Sat, 26 Oct 2024 18:42:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUR-0007ks-CQ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUR-00071P-4A for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=mQUVwlXCJ45NPdKk9aWobtO4wZYb2lO8FaaeJLJjTls=; b=XWZnuOmgLdQRcbqHixN0+ilSxmg48mJaZS/oiRPUIr5DShwU77gVO4k6U+LSFROcVX4yggtOMlUB6YXpWBhaOUlTFm1y/o/PYCMNkjeemlrEaXepJLv0zsVtnwQdUdstgHbiuEQnAaqWLuomojghXMdNXPiwW3CaqHGj9oW+IkSzW1zqq+ZcC6kPXvFaXcNjSy+mryCQ0Wrj4RZ7a6lx1p4uHHi77qJAu2+vcP3Q8L/1n52HHp3uU+62xVTMHqr2b7a55MGrIyRujlfg/8hGfK7/424VNeZOEtLYcq7giKNplDDVBfA7UhG7BOd0b5prTp41/4w1ZoeM4wHMLfKGug==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUy-0006g3-V9 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:08 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 16/21] gnu: onedrive: Update to 2.5.2. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998257925524 (code B ref 74034); Sat, 26 Oct 2024 22:43:08 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:59 +0000 Received: from localhost ([127.0.0.1]:42956 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUo-0006dW-IA for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:58 -0400 Received: from 4.mo575.mail-out.ovh.net ([46.105.59.63]:33571) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUT-0006cM-9m for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:38 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.139.157]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQf0tJ2z1jHn for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:02 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-tf7g6 (unknown [10.110.101.105]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id F085F1FD47; Sat, 26 Oct 2024 22:42:01 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-tf7g6 with ESMTPSA id bhFEMzlwHWf1KQkANq37FA (envelope-from ); Sat, 26 Oct 2024 22:42:01 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R00319f64a83-1521-49c1-8695-12d56f32799e, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:16 +0200 Message-ID: <20241026224125.29272-16-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8086776083729998562 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddtnecuvehluhhsthgvrhfuihiivgepvdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehjeehpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=mQUVwlXCJ45NPdKk9aWobtO4wZYb2lO8FaaeJLJjTls=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982522; v=1; b=3HKQoyEjX/Dgju0/0980iVhxHAoRgBul+Vq9d2rxt8NBKosvxehBPYd8yQ7iH5TB4EvoDlaw 5h1CEFEKyiyBazqgbsy93wFemms4YwrDsmh0yNHi5n2wZRSbNg9+Ch+4OuD88z0Li96z68o0SJs yLtqzap02mvN+ztFmr9kDbBt5oC2Lkmpnw5CEKt9Gs5TwTFeqYQ5XV+/THsI8Gvql++iCmgD9u4 rMFjKoYfA5prhoxIOtb9XmvN3b2Fl5AUpAOLqTOpYQ42fgOMMwgtzH5gSqIRv29MOXVdnr4wKuz ltX+YHja+a3MrxI/8CrpMDtJsGfDQFVYCqrLUm+TfBg1g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/sync.scm (onedrive): Update to 2.5.2. [properties]: Add lint-hidden-cve. --- gnu/packages/sync.scm | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/gnu/packages/sync.scm b/gnu/packages/sync.scm index af736d0c28..df3bcb6523 100644 --- a/gnu/packages/sync.scm +++ b/gnu/packages/sync.scm @@ -374,7 +374,7 @@ (define-public owncloud-client (define-public onedrive (package (name "onedrive") - (version "2.4.25") + (version "2.5.2") (source (origin (method git-fetch) @@ -383,7 +383,7 @@ (define-public onedrive (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1i93mq4r9w8cqrdfsfv8wparfd3dbrppc5z04ab056545hk0x89k")))) + (base32 "0307qa3nncarn6r5837nn9z5nv8j60ycykq6pfn93qriabk65qlx")))) (build-system gnu-build-system) (arguments (list @@ -420,6 +420,10 @@ (define-public onedrive Business, OneDrive for Office365 and SharePoint and fully supports Azure National Cloud Deployments. It supports one-way and two-way sync capabilities and securely connects to Microsoft OneDrive services.") + ;; These CVEs concern another Microsoft product. + (properties '((lint-hidden-cve . ("CVE-2023-24882" + "CVE-2023-24890" + "CVE-2023-24923")))) (license license:gpl3))) (define-public lsyncd From patchwork Sat Oct 26 22:41:17 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69478 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id AF2FA27BBEC; Sat, 26 Oct 2024 23:42:58 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 1F69A27BBE9 for ; Sat, 26 Oct 2024 23:42:58 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUU-0007mb-Fu; Sat, 26 Oct 2024 18:42:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUS-0007lA-0E for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:36 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUR-00071V-Ng for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=ak3EvxESZ9rzSnbqp45ELv79jIN91IoosaaEDWv1bT8=; b=ium44zzpRrmg8NVpr7LdR8/0of67E+pq7TRcut3ko7QTvB9ZBEIn2WfUFc3qIGjpdl/zVPEwVpfUgMdIwp7x5eldVLjn9nwLml1sxegqAmN5Oj7plB31gCQcPNrhWNFeCbxni1gBNhf3GVBVOHr2tGsEpcnsm753ycTz3byRSI5ipH2tBfTb0zOiogwKQyHZ8yZ7XLBwgwBYid2+L/4VpPAyV1k7URKQ8G/3s6MTXfjoKLazL3jG3zfD3vf4CAE5hETjLzpjLeULy05fr4qIPITIbynJIM+LIHtrbzInYcYUtkdaNxtzWZ4BOlbUhRgdFULrIfN7VIkMwz40++ZvWQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pUz-0006gB-EJ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:09 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 17/21] gnu: got: Update to 0.104. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:09 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998257925532 (code B ref 74034); Sat, 26 Oct 2024 22:43:09 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:59 +0000 Received: from localhost ([127.0.0.1]:42958 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUo-0006dd-UG for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:59 -0400 Received: from 11.mo581.mail-out.ovh.net ([87.98.173.157]:38029) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUU-0006cV-Df for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:39 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.176.72]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQg1j6rz183p for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:03 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-qwt7g (unknown [10.111.182.37]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id DBA111FDF4; Sat, 26 Oct 2024 22:42:02 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-qwt7g with ESMTPSA id J15YIDpwHWfk3gIAUy94fw (envelope-from ); Sat, 26 Oct 2024 22:42:02 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G0032d03b68f-8e45-4cdb-9acf-5516770258fb, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:17 +0200 Message-ID: <20241026224125.29272-17-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8087057556760355554 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepfefgvedvieejtddvkefgieethefgjeetueefgfeutedukeevgeetjeekvdetffeinecuffhomhgrihhnpehgrghmvghofhhtrhgvvghsrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ak3EvxESZ9rzSnbqp45ELv79jIN91IoosaaEDWv1bT8=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982523; v=1; b=ShBj2sicYk9t2T6YvILWUh2isoke4rUKR/y2NXl54liA/bpsq7IRzu7HOg/sWJWp/vRI8j4f rpRY14rje2bSVrv3qtWBK+uLm6H2babXxtB9l0XlFGxhna1qPulpkkxTOlvlo+sI0buQS3APjuA 9HMs0Gan8jdMgruFhn9EgOERXNTKU2pOsZ1i21Rvwibpz9HvbKG6wzCqttwsIOv1QqpMwa8TgWH kLvXrjziKT8rByYP+LcJWZjuQ+IsQWWz1lrxmHkS82KdPYQZaJCvsGa2fgN+EAeFvJS0gNwawLD Ekah0ElDbbaLw+2GbIwcQ+R4qlYCnLAuZ7ThMSG0fPxkg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/version-control.scm (got): Update to 0.104. [properties]: Add release-monitoring-url and lint-hidden-cve properties. --- gnu/packages/version-control.scm | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index 6bd37fee82..9c8fdea0a6 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -971,7 +971,7 @@ (define-public git-tools (define-public got (package (name "got") - (version "0.103") + (version "0.104") (source (origin (method url-fetch) (uri @@ -980,7 +980,7 @@ (define-public got version ".tar.gz")) (sha256 (base32 - "0y18961xrj4rja850i31gadiaps2qnkfb4jlramlz9akyf9mwh1j")))) + "1jf8d7bd6jb09ci66n3rjfv94kvzgnqbw1js74hpajdw41wphbdk")))) (inputs (list libevent `(,util-linux "lib") @@ -1016,7 +1016,12 @@ (define-public got "Game of Trees (Got) is a version control system which prioritizes ease of use and simplicity over flexibility.") (license license:isc) - (home-page "https://gameoftrees.org/"))) + (home-page "https://gameoftrees.org/") + (properties + ;; Can lint for updates, but not update in place. + '((release-monitoring-url . "https://gameoftrees.org/releases/") + ;; This CVE is for another Node got package. + (lint-hidden-cve . "CVE-2022-33987"))))) (define-public xdiff (let ((revision "0") From patchwork Sat Oct 26 22:41:18 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69484 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id AAEB727BBE9; Sat, 26 Oct 2024 23:43:25 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 3586E27BBE2 for ; Sat, 26 Oct 2024 23:43:25 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUX-0007os-2a; Sat, 26 Oct 2024 18:42:41 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUS-0007lK-En for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:36 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUS-00071h-5y for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=8igYY1cPOPjN6SQww/kghhNUEQ7UkC1amoUhwqJAVC8=; b=LCCJ7fZgqf6kbLQiNzUD1e6vSWRZKGQYaXbhoI21xHdg3iKtQ8oliubysb4vxAlAdfSISI5JU72P44e1XquGJ0G5+rN0hTgSz+6aUfv1RPX4terqj3vDm6KYW9Pd28jecLsiB1DKJz+ISImMVzgzUCGfTtpEkuo4VvO7ryWQj/rl1C30Vl1MqIFZpzxOlo16vOi6Yl/VwtTWZDYs19yqFJH5FMZn6zm1UHstFrHBT7MMznwo/E7sbmGJgwb4uq8YAOuz6hTXi0JC6lU3gQtPVLXDTT8GE+ataTEbh46WZ/Z9OmzfxqEpeAbTkJZvSfuYpO/psPU3f2JHUGjSF1vlAg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pV0-0006gI-2c for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:10 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 18/21] gnu: dex: Update to 0.10.1. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998257925539 (code B ref 74034); Sat, 26 Oct 2024 22:43:10 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:42:59 +0000 Received: from localhost ([127.0.0.1]:42960 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUp-0006dl-CC for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:59 -0400 Received: from 2.mo550.mail-out.ovh.net ([178.32.119.250]:60935) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUV-0006cY-3n for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:40 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.140.39]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQg75Sgz1Rqh for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:03 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j9l5v (unknown [10.111.182.37]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C83251FD47; Sat, 26 Oct 2024 22:42:03 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-j9l5v with ESMTPSA id jgxgIDtwHWcEUAAAgDeOYQ (envelope-from ); Sat, 26 Oct 2024 22:42:03 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G00585ff8f91-3eec-4f6a-b32f-0ee32170a33d, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:18 +0200 Message-ID: <20241026224125.29272-18-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8087057556316087010 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=8igYY1cPOPjN6SQww/kghhNUEQ7UkC1amoUhwqJAVC8=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982524; v=1; b=WnbC2cB7ycNL//nGqe0VycnfTOoP7Ne+Kw7FcWopG1hScox+9S7D9bE/PxIDgrLqUUrB3wL6 5nf2IRH7G4mzGo599rhcB2QT2LsB5YHt2EbyCJcP/R2crVWafOIqSRwffBH+nb0dVnCbU7BAP1J PWsB+qPQGeCreLZrNIGwJ/X5PPpxgPEFnh3rKl3pyJQtatFIvItmqKtPSygx8b3VS9DAeKFl92M h2fw2m2JdsheoXFhQY5bweKHUtdMPRLIG/BvD8h561qbGt4igVvWIqbAWf/DCqqieJAedEqc2kp d0aQRSFcjcYEqCBejAk3fu+XAGBzPQxx3i5xtktJnpcWQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/xdisorg.scm (dex): Update to 0.10.1. [arguments]: Improve style. [properties]: Add lint-hidden-cve property. --- gnu/packages/xdisorg.scm | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/gnu/packages/xdisorg.scm b/gnu/packages/xdisorg.scm index ca50bebab4..10c04fc4e8 100644 --- a/gnu/packages/xdisorg.scm +++ b/gnu/packages/xdisorg.scm @@ -3536,7 +3536,7 @@ (define-public nwg-launchers (define-public dex (package (name "dex") - (version "0.9.0") + (version "0.10.1") (source (origin (method git-fetch) (uri (git-reference @@ -3544,15 +3544,16 @@ (define-public dex (commit (string-append "v" version)))) (sha256 (base32 - "03aapcywnz4kl548cygpi25m8adwbmqlmwgxa66v4156ax9dqs86")) + "1d7fqy63i4q0mw316i5ws1sgdq3f7h3bsf3avvmy0nzshz7i5y6m")) (file-name (git-file-name name version)))) (build-system gnu-build-system) (arguments - `(#:make-flags (list (string-append "PREFIX=" (assoc-ref %outputs "out"))) - #:phases - (modify-phases %standard-phases - (delete 'configure)) - #:tests? #f)) + (list + #:make-flags #~(list (string-append "PREFIX=" #$output)) + #:phases + #~(modify-phases %standard-phases + (delete 'configure)) + #:tests? #f)) ; No tests. (inputs (list python)) (native-inputs @@ -3562,6 +3563,10 @@ (define-public dex (description "@command{dex}, @dfn{DesktopEntry Execution}, is a program to generate and execute @file{.desktop} files of the Application type.") + (properties + ;; These CVEs concern... + '((lint-hidden-cve . ("CVE-2024-20802" ; ...a dex Samsung package. + "CVE-2022-39222")))) ; ...a OpenID connect tool. (license license:gpl3+))) (define-public sx From patchwork Sat Oct 26 22:41:19 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69481 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id E583A27BBEB; Sat, 26 Oct 2024 23:43:11 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id A68BE27BBE2 for ; Sat, 26 Oct 2024 23:43:11 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pUU-0007mj-QQ; Sat, 26 Oct 2024 18:42:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pUS-0007mA-UA for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:37 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pUS-00071n-LS for guix-patches@gnu.org; Sat, 26 Oct 2024 18:42:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=EJnVGdRAh3vEQxRVvCRLzzsmYY+PFCSU1mgxgEng72E=; b=EyGdbDElqsphklFz2RHB80M3IcQUQKO2YbA8jSj3Vv9pwNbZCzoDh1CVfi1mVIa3sO8vyh3rPfGylnejg0Q+qBC+4NMTe/2obbnjNz2UP/SNbVP5aW5CxAbVRvOc3J0Cvptv17eucfGnxu08+pfeT6ik4ouA/gd5sWzXKv7JCUZWKIvUYrentp/WkKLXWzz3NQAASTwd7/UrcfbJKoHhg9D/nO2Efyk8iwYcVAfVmieCOyLnrWbLYK9jxoDLjz1D6gO718kRXChKOuwIOu7P8EPW97zrf1W6WhxEUIQu5wRmZGPpg+su06PT7eboAkzoIzx4kZ4Ml6JwdCu/9ntoAQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pV0-0006gQ-Gx for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:10 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 19/21] gnu: immer: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:43:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998258025545 (code B ref 74034); Sat, 26 Oct 2024 22:43:10 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:43:00 +0000 Received: from localhost ([127.0.0.1]:42962 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUp-0006dt-Pg for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:00 -0400 Received: from 12.mo581.mail-out.ovh.net ([178.33.107.167]:38577) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUf-0006d0-Jk for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:50 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.148.49]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQt2rg3z1JXh for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:14 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-75tfv (unknown [10.110.188.251]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 316BD1FDBD; Sat, 26 Oct 2024 22:42:14 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-75tfv with ESMTPSA id OdbBBUZwHWcXXhoAHczbNw (envelope-from ); Sat, 26 Oct 2024 22:42:14 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R006af6e07e0-d83a-4b4a-b0c6-17d59e9b7aea, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:19 +0200 Message-ID: <20241026224125.29272-19-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8090153784818197218 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgepvdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=EJnVGdRAh3vEQxRVvCRLzzsmYY+PFCSU1mgxgEng72E=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982534; v=1; b=WKqqLAfUKl0CzOxqiiQWGaBffjeROz/ZuVllTfwsMMCAmry0ErFI8tT5hPa9Dl7AXzdelKqg kTas2vfww8S8NfOmv8ofyF73981pYzLyzj+iOnCSGLR9uBC/ox83G0OkZxaVG4np5AKGE/Rg4V7 xLDJgvv+WvR6JeR1fFdX/DMKC48cSP3bvE9siyyVqCrdRIKOZy+4prmsmnMaPfWTEL+vzEZxtQb MTiAVpMZQKh8mP0MbmBMdxBsCacHXTONYuqapDcUGy3QNfcDP2NjCYDgN/2bvwdoWAtTNFBvfrh g/Ag5up1u0eLD0l2iktBcdHmd9fRli8l7kBTJSfBzO/nQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/cpp.scm (immer)[properties]: Add lint-hidden-cve property. --- gnu/packages/cpp.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/cpp.scm b/gnu/packages/cpp.scm index e9c6dc096b..80eaa26b37 100644 --- a/gnu/packages/cpp.scm +++ b/gnu/packages/cpp.scm @@ -1864,6 +1864,8 @@ (define-public immer (synopsis "Immutable data structures") (description "Immer is a library of persistent and immutable data structures written in C++.") + ;; This CVEs concern the immer.js Node package. + (properties '((lint-hidden-cve . ("CVE-2021-23436" "CVE-2021-3757")))) (license license:boost1.0))) (define-public zug From patchwork Sat Oct 26 22:41:20 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69488 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 6113527BBE9; Sat, 26 Oct 2024 23:43:33 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 2076627BBE2 for ; Sat, 26 Oct 2024 23:43:33 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVL-0008T3-R4; Sat, 26 Oct 2024 18:43:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVI-0008Ph-SK for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:28 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVI-0007CT-Jm for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=6Ypszm2Kcp951c/YA1syMMsEGm35Rsn427+r0ZfFtRI=; b=vYVPKiRxMnHw7W53fPNiyDs9NoLgjA7G1wNr5VzZ7L94WugUpTbwiwlSmrRjbJ6F1qZu8dZ6Wpih+yngw1m0WmGZOsrs2jg6n/de+ucSjaQ0lwinUU1V1EH+v2HsoUTilErjJgRk49onP3q/aMul7AeTXFW23qtJ7K6JxJonEBPvRQ49YV2mD7AU2XotXHxaCD35bytrmlQCL0jZ7SvewRW6rYko4NFcbASqVKD6KZYNqDgBGLmbhawZE7x3i/13LMM77gusalEH+OBLZ2gh77ZJgzmY9Vh/xSgRM9C3IWufAd95uJdptEPNIum2SyGFIlBiI/jY2rHnzEZJBTU1dw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVq-0006jg-Fa for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 20/21] gnu: cvs: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998259425728 (code B ref 74034); Sat, 26 Oct 2024 22:44:02 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:43:14 +0000 Received: from localhost ([127.0.0.1]:42985 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pV3-0006gp-UL for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:14 -0400 Received: from 5.mo582.mail-out.ovh.net ([46.105.54.31]:39521) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUg-0006d3-AG for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:51 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.9.167]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQv08H3z1DVD for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:15 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-76zrf (unknown [10.110.164.244]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id D0B3A1FD33; Sat, 26 Oct 2024 22:42:14 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-76zrf with ESMTPSA id HjvzK0ZwHWdLHB4Ayyemgg (envelope-from ); Sat, 26 Oct 2024 22:42:14 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R0012f9736cb-21c8-4826-be9c-22db83198148, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:20 +0200 Message-ID: <20241026224125.29272-20-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8090435258724770530 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefgeesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=6Ypszm2Kcp951c/YA1syMMsEGm35Rsn427+r0ZfFtRI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982535; v=1; b=jLfdKQOI4BWrn7LDihXHmljW93eY2ZWfZhgBqFwEZQ+lPWiYOORe0mdFrzy1nmMwCAxAmWj3 kHEUON6TSCPcGKxn1HUsLBQaiup6N77Nr6I/O8NWr6gIflr9DIkf0BoD3CdPlTnIBAChqoNEkWr M6aaR3L+KVAw0/rLamoY0ow2Uo0+442IA9H1Ov+hChuCA2m8WVOXfWXfqinUxdsKiklY5zgbVYi TCmH4s9h8CQ3JMLov/aYH7WUtIylnJJ4gRf41G+G0kvqYGiZSPP6H1t8FRjahdFclK8ySj3yNeE iZgwf8UHW6sVslqho/qkiDzI4OgQSefXyUlf6TE08vFBA== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/version-control.scm (cvs)[properties]: Add lint-hidden-cve property. --- gnu/packages/version-control.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index 9c8fdea0a6..f4a0f577a9 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -2750,6 +2750,8 @@ (define-public cvs Configuration Management (SCM). Using it, you can record the history of sources files, and documents. It fills a similar role to the free software RCS, PRCS, and Aegis packages.") + ;; This CVE concerns the Jenkins CVS plugin. + (properties '((lint-hidden-cve . ("CVE-2022-29037")))) (license license:gpl1+))) (define-public cvs-fast-export From patchwork Sat Oct 26 22:41:21 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69494 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id D4B9727BBED; Sat, 26 Oct 2024 23:43:43 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 99BD227BBE2 for ; Sat, 26 Oct 2024 23:43:43 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVK-0008QA-G4; Sat, 26 Oct 2024 18:43:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVI-0008PT-Eg for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:28 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVI-0007CH-5e for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=UFpallWz0g6Do1CneIKpYpdPW9vmzAE5XwHjZ3OVhCw=; b=VrBhZlhGFrAFF/8WskRjGa9AtrvpBYBhAkQadPt0Tc5hSAF7a9B3/vUlim9CbvkDCmaQH2uDE29YQT2J9fd8BwdAEV4s8YC8hkg2zz5CPSK6IpE+ucMGDeIDcdTr7Xj7z2tXT+Oqvy5n3FUlXEIo5hNr1ogr06H4uFalzWbxbKGvUFcK5R5/mpaQUw4pWZnZRZoLF4ti974hRBgV5R1a4OxC36BScvYvRD4DjnA5P+79oa3fu2EY6vB/jvWwQ8+uxT4/q5YyMRwxNgwLHdakOTJaNRA6gNZKqAuw4+TtjUn7yKbAHRMrhnf7T6TVYQ0tHHmZMQrzs7ox1o1tFBQKtw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVp-0006jZ-Vv for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74034] [PATCH 21/21] gnu: gerbv: Add lint-hidden-cve property. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74034 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74034@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74034-submit@debbugs.gnu.org id=B74034.172998259425722 (code B ref 74034); Sat, 26 Oct 2024 22:44:01 +0000 Received: (at 74034) by debbugs.gnu.org; 26 Oct 2024 22:43:14 +0000 Received: from localhost ([127.0.0.1]:42983 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pV3-0006gj-4h for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:13 -0400 Received: from 12.mo584.mail-out.ovh.net ([178.33.104.253]:52855) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pUg-0006d5-Ru for 74034@debbugs.gnu.org; Sat, 26 Oct 2024 18:42:51 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.140.35]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZQw1tSpz1Nhv for <74034@debbugs.gnu.org>; Sat, 26 Oct 2024 22:42:16 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-852sz (unknown [10.108.54.213]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id B34871FDB1; Sat, 26 Oct 2024 22:42:15 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-852sz with ESMTPSA id pV31HEdwHWf+hgUAEPcHVg (envelope-from ); Sat, 26 Oct 2024 22:42:15 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R005ed2ac6b3-dcb0-44e9-abe6-b90bd36a2cab, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:41:21 +0200 Message-ID: <20241026224125.29272-21-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224125.29272-1-ngraves@ngraves.fr> References: <20241026224125.29272-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8090435257483846370 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdegnecuvehluhhsthgvrhfuihiivgepvdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeegseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeegpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=UFpallWz0g6Do1CneIKpYpdPW9vmzAE5XwHjZ3OVhCw=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982536; v=1; b=F52sRvZkAlcmWEZnOzuJVL7oWRx/bxtmjIeNYf2YBMGE16SzQXUAOjjW7Avu+OMFE2gQWIVl L/Mf4aU7cyDWBDWrC8Ihasm6vXiaJEFilVffbQ700dRc/IHnmfHM/uHkLrc7Mp/35aSN1k8g/hy rTdOmtvtHwMqkI2uHDwsd9OhrsXjLofQpLHpJcC6VxnBqlqMZqjzeMATCm+1NWBz3GIQCivID6R PV+WQT3wdei6BsmKru23tPAfqQ3UiZ5H8FMB9Aep4umq3VZNzkUvnoc4cIns81bWStHdbFxrXAM HuS5J/As7GZqOMeEu2L6h4ckBwtG4ootgNU9hpDGnOGgg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/engineering.scm (gerbv)[properties]: Add lint-hidden-cve property. --- gnu/packages/engineering.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/packages/engineering.scm b/gnu/packages/engineering.scm index 6f449f0c39..89e60a7218 100644 --- a/gnu/packages/engineering.scm +++ b/gnu/packages/engineering.scm @@ -868,6 +868,8 @@ (define-public gerbv you load several files on top of each other, do measurements on the displayed image, etc. Besides viewing Gerbers, you may also view Excellon drill files as well as pick-place files.") + ;; This CVE has been fixed in version 2.10.0. + (properties '((lint-hidden-cve . ("CVE-2023-4508")))) (license license:gpl2+))) (define-public translate2geda