From patchwork Sat Oct 26 22:42:22 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69499 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 3DD9727BBEA; Sat, 26 Oct 2024 23:44:04 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id EE6E227BBE2 for ; Sat, 26 Oct 2024 23:44:03 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVN-0008Uw-4M; Sat, 26 Oct 2024 18:43:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVJ-0008Pu-Av for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:29 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVJ-0007Cb-2g for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:In-Reply-To:References:Subject; bh=pxk7UZfXkYvn1LkT9YH2e2k0/sOL0hU4dQ8JC7xa7pM=; b=ArpiYFfoU1UXydOLJUPodr2XVtABDY1JXKu5q98Qu5kYFC7k91NAnq99XZDp/FCW8xtAZQJAkz6CaCdwlr87wgjuY69sqi6DYp41jlmjBDPZb5z7bHwhZ7q/PUEZNwj3PvJy6ANmO0lX2bb7ldVgcI/qg5KL8zipzWA5SxG3j1Tv2dxF7vEBnIVw/ZKoiQzfpIQXdyehRbO7EaeAmXrn/A2BHfukp/bZY0zyPOhvjnwEorz5nwMrLclqCxdD8RD6fEMobDjD7wmlRX73rx0KO005rJnXsLEv9RF3DcO9f5UXBN7JJPCxgHecsLuejzXuD95V3TpkX8abtwg6E52Jtw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVq-0006jp-UM for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 01/24] gnu: python-django-4.2: Update to 4.2.16. [security fixes] References: <20241026223238.26667-1-ngraves@ngraves.fr> In-Reply-To: <20241026223238.26667-1-ngraves@ngraves.fr> Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998262625796 (code B ref 74035); Sat, 26 Oct 2024 22:44:02 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:46 +0000 Received: from localhost ([127.0.0.1]:42993 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVa-0006hu-AQ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:46 -0400 Received: from 20.mo581.mail-out.ovh.net ([46.105.49.208]:37013) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVX-0006hd-9V for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:44 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.148.34]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRw1LCfz1Hr9 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dk7fm (unknown [10.110.178.131]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E934D1FDD5; Sat, 26 Oct 2024 22:43:07 +0000 (UTC) Received: from ngraves.fr ([37.59.142.108]) by ghost-submission-5b5ff79f4f-dk7fm with ESMTPSA id 7KuHLntwHWehlBYAbQeWaQ (envelope-from ); Sat, 26 Oct 2024 22:43:07 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-108S002abb8b42c-e4e8-4845-b369-e527b0c97b79, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:22 +0200 Message-ID: <20241026224300.30694-1-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 MIME-Version: 1.0 X-Ovh-Tracer-Id: 8105353433055290082 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeffgeetfffgffejgeejvdffgfdtvdeuueetgfefuedvjeegvdegjeejveeuueevnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=pxk7UZfXkYvn1LkT9YH2e2k0/sOL0hU4dQ8JC7xa7pM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982588; v=1; b=B/YqP9aalZAfS6cV0Vloa4a6h/WS5JoXp1iMUsXWSOYlQOBYUprehBtL+qRjk4JqXqj0V9qe nvWrQAZWuU1tPCKY/4gaiq5RGeXvjId/L0FDb6+3xeCzquTQna96z8DMneNDIsrMUAUZBCDDqKg vuW6XwoRehpq9r72qR2QWeYTELEWCWQk5oq+OrIXaLkmQvAFzo8Xcc840JfNu2FOqSmaZKZoxHU ArEJ2IP3cncvVeTWUzZRIwk74FQa+wZWniMaTx8BjwCXbqpIfj/g23Tx48rkgywx2wx9evvJWVr xtrEG6E9lbnPa2syLbYvAelV5r7tb9j2Kd+TQcy6PAG2A== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231, CVE-2023-43665 and CVE-2023-46695. * gnu/packages/django.scm (python-django-4.2): Update to 4.2.16. [properties]: Add lint-hidden-cve property. --- gnu/packages/django.scm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/gnu/packages/django.scm b/gnu/packages/django.scm index 4404c8368d..4cf043f7c1 100644 --- a/gnu/packages/django.scm +++ b/gnu/packages/django.scm @@ -57,13 +57,13 @@ (define-module (gnu packages django) (define-public python-django-4.2 (package (name "python-django") - (version "4.2.5") + (version "4.2.16") (source (origin (method url-fetch) (uri (pypi-uri "Django" version)) (sha256 (base32 - "1ha6c5j3pizbsfzw37r52lvdz8z5lblq4iwa99mpkdzz92aiqp2y")))) + "1b8xgwg3gjr974j60x3vgcpp85cg5dwhzqdpdbl8qh3cg311c5kg")))) (build-system pyproject-build-system) (arguments '(#:test-flags @@ -140,7 +140,9 @@ (define-public python-django-4.2 any Web site. Django focuses on automating as much as possible and adhering to the @dfn{don't repeat yourself} (DRY) principle.") (license license:bsd-3) - (properties `((cpe-name . "django"))))) + (properties `((cpe-name . "django") + ;; This CVE seems fixed since 4.2.1. + (lint-hidden-cve . ("CVE-2023-31047")))))) (define-public python-django-3.2 (package From patchwork Sat Oct 26 22:42:23 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69489 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id DFF6527BBEA; Sat, 26 Oct 2024 23:43:35 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 5000027BBE2 for ; Sat, 26 Oct 2024 23:43:35 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVL-0008SO-CE; Sat, 26 Oct 2024 18:43:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVJ-0008Q8-Vb for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVJ-0007Cp-Mq for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=onnxrFb5nK8ls90p7kXO3kCbBG6qTED88gtXfuvLivE=; b=cejxIDPvoUGQtYzhPBEAUb9q/eQWWXugs1GaoRNeVPTu3TW4INHks7l+YNG+26gslBYYCGLBuHQnMgIFd3F02dmmfDMLm5W3O7I8TopBSpDEt1oMFfF2ekU1JXGUKVC1qGKa/MKxriMVkApZ/kChkjBgh1gk6ZNAGDBC9NuDMsmLZawkuvAW0xH0CQBjLd05OqEv123prWCmgkyPfH1sKdVKoMWVqcTa1IMs/Vo5UwBGvMFZBXmFpx7MzpVOY937a+y/QPFICR4xESlXGzifQNu1/B1mNXaCOJNt8Kv+SlBQ7X2QHkedBfrIdn8YD7G89RzU9XuVU8TaJGwPBMKxAQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVr-0006jw-He for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 02/24] gnu: maradns: Update to 3.5.0036. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998262725803 (code B ref 74035); Sat, 26 Oct 2024 22:44:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:47 +0000 Received: from localhost ([127.0.0.1]:42995 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVa-0006i1-Q2 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:47 -0400 Received: from 1.mo575.mail-out.ovh.net ([46.105.41.146]:58315) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVX-0006hf-Vd for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:45 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.108.9.109]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRw75j0z1jMF for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-r9hh7 (unknown [10.110.96.193]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id BD1591FD91; Sat, 26 Oct 2024 22:43:08 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-r9hh7 with ESMTPSA id LmigJHxwHWelZRkANT5Cbw (envelope-from ); Sat, 26 Oct 2024 22:43:08 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004713b7531-4fe1-435f-a18c-0113b0a59ece, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:23 +0200 Message-ID: <20241026224300.30694-2-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8105353433609593570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=onnxrFb5nK8ls90p7kXO3kCbBG6qTED88gtXfuvLivE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982589; v=1; b=XDzk8FoGJFWUSHzkJc+BG4BC4O1gDjUplTzYoIt04+XW8mc02PRT1F1dzoBPqMZj/UeCRubN GXksPfeywUsdyE44DnYXDPHEy4KPFxmVZEx3BgmlA1kbZ8l8gQLm3v1gte6nNVe896ipWyNEzV3 SwVicp13eNnd7Qo9e46DVzqHnKALzvmStkLWqlm/kKhtaedK9pn/660EFJqrhFCZZVrVIzmZs/w 6Qduz9b09sHaoylXvmACi0I6JqOp8Mi4L7khARU5fXCqquznf0Tn+/TKlnNBNgimYE7oAyZSHUo RJVTkvtfHjuQk/jaDon3mvm+trdotu2Y9isBTmoM2EeaQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-31137. * gnu/packages/dns.scm (maradns): Update to 3.5.0036. [properties]: Add release-monitoring-url property. --- gnu/packages/dns.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index e911a142ef..bd2df30f01 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1181,7 +1181,7 @@ (define-public public-suffix-list (define-public maradns (package (name "maradns") - (version "3.5.0022") + (version "3.5.0036") (source (origin (method url-fetch) @@ -1189,7 +1189,7 @@ (define-public maradns (version-major+minor version) "/" version "/maradns-" version ".tar.xz")) (sha256 - (base32 "1sw267jxxxngjcar8cj3jpxnpiz0szgkhlz5l46c67qs690w9kdi")))) + (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments `(#:tests? #f ; need to be root to run tests @@ -1226,6 +1226,8 @@ (define-public maradns (description "MaraDNS is a small and lightweight DNS server. MaraDNS consists of a UDP-only authoritative DNS server for hosting domains, and a UDP and TCP-capable recursive DNS server for finding domains on the internet.") + (properties '((release-monitoring-url + . "https://maradns.samiam.org/download.html"))) (license license:bsd-2))) (define-public openresolv From patchwork Sat Oct 26 22:42:24 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69501 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id CF49727BBE9; Sat, 26 Oct 2024 23:44:11 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 11E4727BBE2 for ; Sat, 26 Oct 2024 23:44:10 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVM-0008U7-9d; Sat, 26 Oct 2024 18:43:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVK-0008Qk-Jm for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVK-0007Cw-Ao for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=amrZS3GarlmkVIj6HiT3MN4ghng6ibDQEQGAPgPZ/3A=; b=inloHf77ACzPSS9f1RYKWszpmOOO7AvXkWiI1UoO5dWCMB8d73SIO8BMeJeYNtfy3+Cngi1qQUWGold4NoEDCq2xlb3HdS9KYNoQclVqfCR1tiVpq77p4/ZhXPnUXHb4ovFEnQIKJwFYnacVu3mDoemPAWqX33b8zE+hU1SuYHEwW6QTgxjk+CUIlb5DpfkCEkHy09tLrxVh331zzA3iiiaEWUczPQppOAwneQiFtE2XpRpr9Cql4CH7G1tUxpsjuJy7RuHbJT1UmfD+vJE4snKOQdX9EOwPabaCrFPAovZO9DPCbrB53x9SeaJWLAa7M5WSzIxsSddR/K2o7XLE+w==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006k4-3V for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 03/24] gnu: maradns: Improve style. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263325825 (code B ref 74035); Sat, 26 Oct 2024 22:44:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:53 +0000 Received: from localhost ([127.0.0.1]:42999 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVh-0006iS-7u for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:53 -0400 Received: from 17.mo550.mail-out.ovh.net ([87.98.179.142]:50475) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVZ-0006hm-BC for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:46 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.59]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZRy0Nw6z1SwB for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:10 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j9l5v (unknown [10.111.182.47]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id BAECA1FD6B; Sat, 26 Oct 2024 22:43:09 +0000 (UTC) Received: from ngraves.fr ([37.59.142.100]) by ghost-submission-5b5ff79f4f-j9l5v with ESMTPSA id 9hvbHX1wHWebUAAAgDeOYQ (envelope-from ); Sat, 26 Oct 2024 22:43:09 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-100R0039176b495-c296-493a-8c40-8c18fe095fa4, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:24 +0200 Message-ID: <20241026224300.30694-3-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8105916380142625506 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepkeejhfegteegffeguddtveetudejfeevueetgeelffegjeehfeehudeiudegieejnecuffhomhgrihhnpehsrghmihgrmhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddttdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheehtddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=amrZS3GarlmkVIj6HiT3MN4ghng6ibDQEQGAPgPZ/3A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982590; v=1; b=38KULZTH+OWeFI0HOkeBo+CjcH0oGGXI22waMJnTVxt2YU5a0XPqBUUb+xa7txJtr5sPQrlM 3STTDd0b1rgrqp6/ZODoXqfcARJAU5o6Gcr1AOo8rNT7U9BrAh+rCa0/1q/oerynf8ThtoQBM+O gSiAorGAMeQELkX6u8GOQE3V0U+/ts1xrhGvPtKMkurpzMJaHI1f3IXYBhF5Fj8pL0swVmExw8N rDjDh537e/hjpTCiUA9EF0Ub5i6OTKGR/pODOM4qCDTZVsheu1i3D2nIHQKTSX+v/trjNZ9exs+ E5FyUfz6y+Ekx5qDD/ERZ/RhYxPBMBYgjUvKZtxPJ6McQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/dns.scm (maradns)[arguments]: Use gexps. --- gnu/packages/dns.scm | 58 ++++++++++++++++++++++---------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bd2df30f01..7a78fb0308 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1192,35 +1192,35 @@ (define-public maradns (base32 "185kl7zfvnwzfpyxbzpwck13m468av74kbqijp0s4v33iicfpnvc")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; need to be root to run tests - #:make-flags - (list - ,(string-append "CC=" (cc-for-target)) - (string-append "PREFIX=" %output) - (string-append "RPM_BUILD_ROOT=" %output)) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda* (#:key native-inputs target #:allow-other-keys) - ;; make_32bit_tables generates a header file that is used during - ;; compilation. Hence, during cross compilation, it should be - ;; built for the host system. - (when target - (substitute* "rng/Makefile" - (("\\$\\(CC\\) -o make_32bit_tables") - (string-append (assoc-ref native-inputs "gcc") - "/bin/gcc -o make_32bit_tables")))) - (invoke "./configure"))) - (add-before 'install 'create-install-directories - (lambda* (#:key outputs #:allow-other-keys) - (let ((out (assoc-ref outputs "out"))) - (for-each (lambda (dir) - (mkdir-p (string-append out dir))) - (list "/bin" "/sbin" "/etc" - "/share/man/man1" - "/share/man/man5" - "/share/man/man8")) - #t)))))) + (list + #:tests? #f ; need to be root to run tests + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + (string-append "PREFIX=" #$output) + (string-append "RPM_BUILD_ROOT=" #$output)) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda* (#:key native-inputs target #:allow-other-keys) + ;; make_32bit_tables generates a header file that is used during + ;; compilation. Hence, during cross compilation, it should be + ;; built for the host system. + (when target + (substitute* "rng/Makefile" + (("\\$\\(CC\\) -o make_32bit_tables") + (string-append (search-input-file native-inputs "/bin/gcc") + " -o make_32bit_tables")))) + ;; ./configure doesn't support default flags + (invoke "./configure"))) + (add-before 'install 'create-install-directories + (lambda _ + (for-each (lambda (dir) + (mkdir-p (string-append #$output dir))) + (list "/bin" "/sbin" "/etc" + "/share/man/man1" + "/share/man/man5" + "/share/man/man8"))))))) (home-page "https://maradns.samiam.org") (synopsis "Small lightweight DNS server") (description "MaraDNS is a small and lightweight DNS server. MaraDNS From patchwork Sat Oct 26 22:42:25 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69496 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id B8CA927BBEC; Sat, 26 Oct 2024 23:43:48 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 7C34827BBE2 for ; Sat, 26 Oct 2024 23:43:48 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVM-0008Ur-Ll; Sat, 26 Oct 2024 18:43:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVL-0008SK-9v for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:31 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVL-0007DC-0d for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=wseqx7spf4lhsH68MqgOQ/QcG6moMZQns/hENydGodU=; b=vM/dbZ7xbGN975S24clNYYsel6HbA77PWURTpMWcUe83LdLTxKfjlS+SzS87J/sSQvp4L8CK5+g4G6AxO+YUQOnzqDACnF1n05bbaCp42VQLZ2ZpUbEfCWA0Hc4Ngt+zEREfXrh9OnpVIG4i0lNYL3BhRqaCH24RsZu0CLQEW99iGf9JCMeYjs0vI0p0Jl7+6u8REZaLe+Bs14N7kstcXN6HzqIozom4dtJttGjr/a2ww1tvzdMwWNIUpLsDX1FcsbDYQso6AZHxmCwROnoq8Yeb4rwZ/hXU4BHMXGSjnjBviYKjuIFhBX2ejUsr+uUXGGkhRNhixAUH7hUGIxAvbw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006kD-Pk for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 04/24] gnu: libmobi: Update to 0.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263825854 (code B ref 74035); Sat, 26 Oct 2024 22:44:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:58 +0000 Received: from localhost ([127.0.0.1]:43007 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVl-0006iv-No for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:57 -0400 Received: from 14.mo582.mail-out.ovh.net ([46.105.56.113]:52755) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVf-0006iI-9Y for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:52 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.25.156]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS41WkYz1JmL for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:16 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-dk7fm (unknown [10.110.178.131]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id ADA751FE51; Sat, 26 Oct 2024 22:43:12 +0000 (UTC) Received: from ngraves.fr ([37.59.142.104]) by ghost-submission-5b5ff79f4f-dk7fm with ESMTPSA id d046GH5wHWeslBYAbQeWaQ (envelope-from ); Sat, 26 Oct 2024 22:43:12 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-104R0054024607a-4553-4f49-af22-b1d82a8dac90, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:25 +0200 Message-ID: <20241026224300.30694-4-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8107605230612374242 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdegnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=wseqx7spf4lhsH68MqgOQ/QcG6moMZQns/hENydGodU=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982596; v=1; b=bJjcp9HBLglnP7dXDCWmEiI3SEiM+herMHSmcJSZbhc9ZyNupCtfLnTAupBzvvNzjRlnDHqR nGyZq8nPAg46oLEldTprmvWnFPxBXvzP5QDN4JhIYPfTkfwkouYIRVf4o896wq7i68y8qTGPOR9 bJ/Qogy7b52JbvQdBTXai1TNXuoZtxeBk3K1FJsqwMxWGfC/Z4l1ZfFmUc1wmPrDhEsZLPIM25p F7+00ndggyJqDJvIilTi2b58Q+2NYShWoXlGCwOShgiIs6zK+U9S8MmnlEt5dpm4cvRwSnaIb3R ne/rqYLAIUlRdOcqA9h2oKGB4xiYqxfjUOvcOKBbOtKDw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908, CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751, CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889. * gnu/packages/ebook.scm (libmobi): Update to 0.12. --- gnu/packages/ebook.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ebook.scm b/gnu/packages/ebook.scm index dc30c98fdf..bf8dcfad09 100644 --- a/gnu/packages/ebook.scm +++ b/gnu/packages/ebook.scm @@ -648,7 +648,7 @@ (define-public xchm (define-public libmobi (package (name "libmobi") - (version "0.6") + (version "0.12") (source (origin (method git-fetch) (uri (git-reference @@ -657,7 +657,7 @@ (define-public libmobi (file-name (git-file-name name version)) (sha256 (base32 - "0yps72cm609xn2k7alflkdhp9kgr1w7zzyxjygz0n1kqrdcplihh")))) + "0cwya9n0rd97ai0fcqjwq7b3sjzigf3ywp7bnkbbw541f3knpds9")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) From patchwork Sat Oct 26 22:42:26 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69498 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 7C82827BBEA; Sat, 26 Oct 2024 23:44:00 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 4039827BBE2 for ; Sat, 26 Oct 2024 23:44:00 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVO-00006l-VE; Sat, 26 Oct 2024 18:43:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVL-0008TM-Um for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVL-0007Dj-Le for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; b=EAnc7WkdkJtk03rKxvzmoWTe3E/uf1/AjSM6rV9KxiGHvVRtcmRNnSackovS0ySrqp18BoTUM8rhJuWgQlxUufrkNKpMLeS5+9gla4G3PCEGaxuM8h69m+tNLjlT2KXJuiSLZaVpWUqcsVWszCp1hxeYz+v0XSA12DKbk2AMc1b6oWbluuPNFFs+AZ+t8L2XkcLujZgtSGvZ0R1YroHd1vxGuT7RY6m4GpR+mEwAgIvqhzSePLFGOX4Y2qoWtZkhHCnpPHQ82OVrpKwpx9/WjYyquf6krN0kgfZPUmcAnvviK2ctkYwalfSRtDS0P/BOWsYcToZj3egGDz+U+/Ug/A==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVt-0006kT-G2 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 05/24] gnu: bart: Update to 0.9.00. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998263825861 (code B ref 74035); Sat, 26 Oct 2024 22:44:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:43:58 +0000 Received: from localhost ([127.0.0.1]:43009 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVm-0006ix-1c for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:58 -0400 Received: from 9.mo575.mail-out.ovh.net ([46.105.78.111]:56113) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVi-0006iT-E8 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:55 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.139.43]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS71Gw6z1jNQ for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.178.240]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id E20141FE4C; Sat, 26 Oct 2024 22:43:18 +0000 (UTC) Received: from ngraves.fr ([37.59.142.109]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id TNlPL4ZwHWfnnBYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:18 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-109S0035e698893-f7b6-4e4a-a9e9-1c53eddee0aa, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:26 +0200 Message-ID: <20241026224300.30694-5-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8108449658031235810 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ugHZmGqa8p9Qi9+aoVmJgDTfUM0ZHBvQzvAigpV0eYI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982599; v=1; b=AIhrEuy3scxC9C0kIsk3XJfRoYcUUaSfbD86CdFo5wG8rvrc6MBFdbA2EmWgzdQ0716mRI+i RyCrf+Zodw4DgV8+xYl6QwAqpVXX5rBZ66Zvkn3MMfn6gJhs9MEIzlg+UF7bDl0CtTjj4PlLZbB ECA9X1bm92nk8xMdR3IuUVIiZTk7AIkfD6UXjq72s2MVGSYeZnfGUFWVd/jIlVccO5Y36Hie5l5 RBkZBtCzld/9yYnD56lT9vJrEPpNtOb5ZneeoTJBH4fE9pUJjdSB3vYi+OYkenxZill2lTC3X6O PQJHscHjkIQCXSpV+DV3JYfwvx2IAlU2mbUhkXzZ4qCEg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes bart reproducibility and CVE-2022-45387. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. --- gnu/packages/image-processing.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm index a79eaf6aed..3a7c67362f 100644 --- a/gnu/packages/image-processing.scm +++ b/gnu/packages/image-processing.scm @@ -115,20 +115,19 @@ (define-module (gnu packages image-processing) #:use-module (ice-9 match) #:use-module (srfi srfi-1)) -;; TODO: this is not reproducible. (define-public bart (package (name "bart") - (version "0.8.00") + (version "0.9.00") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/mrirecon/bart") - (commit "eacc67b95cf128487ecc48f0e6541ea4dca08818"))) + (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "05lcf7c3g7ms5h82bw1mi4kzkdv5wpqi1zrfhqfkgbcpd3irj6aq")))) + (base32 "0mj6jmw31rsnvqmpfqahhj4cy9iv5xgrhzmcsrikdz5dgd45lmjz")))) (build-system gnu-build-system) (arguments (list @@ -140,6 +139,7 @@ (define-public bart "OPENBLAS=1" "SCALAPACK=1" (string-append "BLAS_BASE=" #$(this-package-input "openblas")) + (string-append "CC=" #$(cc-for-target)) (string-append "FFTW_BASE=" #$(this-package-input "fftw"))) #:parallel-build? #false ;leads to non-deterministic output #:phases From patchwork Sat Oct 26 22:42:27 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69503 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 11EEE27BBEA; Sat, 26 Oct 2024 23:44:17 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 9669727BBE2 for ; Sat, 26 Oct 2024 23:44:16 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVP-00008k-Bs; Sat, 26 Oct 2024 18:43:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVM-0008Uy-VH for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:33 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVM-0007E3-Kb for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=L4Z/IERDX6ZhZ5O479nkCkfR6S4gTAkH7BDsC4Yz9u0=; b=N8wU/JkBoM9TlNzRAqe5UmQ+jy3roB9ymsXoR8yksJWB6l3ekmemd9wii7hR+60Rh2a+CwcadgM3x7Nm2PxOISBAWv3ARUYohmKB49ksKsAnY1sql4dUBDM5lIvmeTbfEjmmfEGrGCuV9l13NdQBxefcKBp4yhWdgOjJkiAr6pWbEaQ8R5mAw99BMmEJ8GGWNJA0okgZMMArjftDR/pLXrIs7B8TcKfmJjHXBIJpsuOCwixFWdNd2fB3CUAi7a3ppfsNBJwMuXv0mDaH/DVrLJPoxOauPDyeMk+T/mMauLhLZ276V/84aFVt3XF68qWlIEXqZx3tIIxNUN+WubVHcQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVu-0006kl-F9 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 06/24] gnu: wireshark: Update to 4.4.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264525935 (code B ref 74035); Sat, 26 Oct 2024 22:44:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:05 +0000 Received: from localhost ([127.0.0.1]:43018 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006kB-Gk for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:04 -0400 Received: from 10.mo575.mail-out.ovh.net ([46.105.79.203]:32903) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVk-0006id-2K for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:56 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.25.156]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS75R60z1jPr for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-gfxm6 (unknown [10.110.168.37]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 861F71FD5F; Sat, 26 Oct 2024 22:43:19 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-gfxm6 with ESMTPSA id 7pNSGodwHWeMYhoAozXF8w (envelope-from ); Sat, 26 Oct 2024 22:43:19 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R0014250adef-2b77-4aad-93e2-8dc69c7752cb, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:27 +0200 Message-ID: <20241026224300.30694-6-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8108449656175583970 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfegvdefjeegteegteduueeigeevleetgeevteeffedttdffjefgleevgeekvefhnecuffhomhgrihhnpeifihhrvghshhgrrhhkrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=L4Z/IERDX6ZhZ5O479nkCkfR6S4gTAkH7BDsC4Yz9u0=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982599; v=1; b=kYtNNA0SwT65ATppNhLzTz7YxmoVq3NTujZEJfVdd+sXZpPakTbhzMmXWUHmIvXQEqxou3tH 0Bl4E82fqbIDP5HFYA4ti8K5D2R3vP5rFX7GM24lNpFsHvku2iBd7aqvHqoTJ062/ER60Be4/R0 769sYR8gS7aHIOSou4tcL0BGB8d0gXj3C+Tsz+Vk/p9xBtVnNbBn1oncQavpsIfpuCX7dq68Xuz OBpWuvChkn6as+YJVvcZya5SZPLY4ReikEfZsLNs9uG3nZX/4e2nNaMNaJgbFmFoE5lP1mrEJPm tKKipZNsr6N3U6WdhhzFQJJwOUbXk7Htagaqmq2GvfnQQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2024-9780. * gnu/packages/networking.scm (wireshark): Update to 4.4.1. --- gnu/packages/networking.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 7ed011a7f4..31b72f1104 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -1805,14 +1805,14 @@ (define-public whois (define-public wireshark (package (name "wireshark") - (version "4.4.0") + (version "4.4.1") (source (origin (method url-fetch) (uri (string-append "https://www.wireshark.org/download/src/wireshark-" version ".tar.xz")) (sha256 - (base32 "0s8jqxcvq7ibfsq8v4scl8dq7y5hqgpivq4iw9y2x6jj136cvmga")))) + (base32 "1v2nflm8rdifc6pwlzn1ciz22wl15zwkqs3r7gjw60kh59brd7ib")))) (build-system qt-build-system) (arguments (list From patchwork Sat Oct 26 22:42:28 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69502 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 7521727BBEA; Sat, 26 Oct 2024 23:44:14 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 163D427BBE2 for ; Sat, 26 Oct 2024 23:44:14 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVP-00008w-FQ; Sat, 26 Oct 2024 18:43:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVN-0008VS-HA for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:33 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVN-0007EW-8p for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; b=i8zclrsRebQG+GTo0whgw6pSOSkEZsqXZO8HbDiaVWf1GE41xiv/RyVDaqi2JuZDGRc06neQ47fjamB/6zSiHfDtSe2QM+L5TiYTYsxsFI3eCCtfCvuq/Xh/A8OcoRWII8VcwfimxECsXx7b3qdAu9+grkfOVAR80gS7uaSh2XvBdLV/VF2VfsEWTlTYRBCiGCtB6juho4rRAVVYRNO6jZjBrVyFTwmqICdR44Z0FykeupMyuj5WoCWVHRyAGonXu4K7CRlFSXNhDzQx8JwWZAPXxWBzWpKymni3logoTtpwh/wTvStJqM0+BJbV/GNmmmDCMbWT1kmS87i1f61d+g==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVv-0006l2-3i for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 07/24] gnu: pam-u2f: Update to 1.3.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264525953 (code B ref 74035); Sat, 26 Oct 2024 22:44:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:05 +0000 Received: from localhost ([127.0.0.1]:43020 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVs-0006kN-Vj for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:05 -0400 Received: from 7.mo560.mail-out.ovh.net ([188.165.48.182]:32993) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVk-0006ic-1t for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:43:57 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.2.78]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZS90CQYz1Zn3 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:21 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-wprtk (unknown [10.111.174.124]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id B2B861FD0F; Sat, 26 Oct 2024 22:43:20 +0000 (UTC) Received: from ngraves.fr ([37.59.142.108]) by ghost-submission-5b5ff79f4f-wprtk with ESMTPSA id X0LnF4hwHWc1hQYA0aRQUA (envelope-from ); Sat, 26 Oct 2024 22:43:20 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-108S002d157e7ee-1468-4f22-82f1-ee3b50bea7f3, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:28 +0200 Message-ID: <20241026224300.30694-7-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8109012604121637602 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepjefffeehjeekgfejledvkeehgfeufeevleevffetvdeftddvtddvjeejhfduffdunecuffhomhgrihhnpeihuhgsihgtohdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=RrrZzLKSp34/rpMfDrnpqBYOCWiOCfISTW7lQ7+ngBM=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982601; v=1; b=u2dNhkajxIicJ8IxAj9dt6vZP7fNy+ef/SI10UayP9qfapAPqeDXL53DLtSi+XYeRK4T5Zyb mgmLSH87pynpPgoNQRfPaHfI/HcgAwW0p21lv7w416cKufYeSq8LK4C4/qdTYPcX216QBMaQUCs XBYeBaU8nQ+KbDJouMOyblC1WpzWzRbQOEaVoSUx+NEug1/5UA2ZUjx81KBAYhKY4l+F3DyXjpy H7MYmw42+L7BVsbOexGfzy549rmYhZA/ohd2ZAJJD2ZQkhT7aswchDGtGM7jf/xts2UcX3fAVJo bpbbpnVbIRkFNJlbKNC4rryQBpoB6V5qBnk9tAQRH2s8g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. --- gnu/packages/security-token.scm | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/gnu/packages/security-token.scm b/gnu/packages/security-token.scm index 5abb461c0c..156a7d5e28 100644 --- a/gnu/packages/security-token.scm +++ b/gnu/packages/security-token.scm @@ -682,7 +682,7 @@ (define-public libu2f-server (define-public pam-u2f (package (name "pam-u2f") - (version "1.0.8") + (version "1.3.0") (source (origin (method git-fetch) (uri @@ -691,17 +691,16 @@ (define-public pam-u2f (commit (string-append "pam_u2f-" version)))) (file-name (git-file-name name version)) (sha256 - (base32 - "04d9davyi33gqbvga1rvh9fijp6f16mx2xmnn4n61rnhcn2jac98")))) + (base32 "1swvys98mw7ailllgqicvhj315qajhvqrmm314cp3bj0l76s9qpv")))) (build-system gnu-build-system) (arguments `(#:configure-flags (list (string-append "--with-pam-dir=" (assoc-ref %outputs "out") "/lib/security")))) (inputs - (list libu2f-host libu2f-server linux-pam)) + (list libfido2 linux-pam openssl)) (native-inputs - (list autoconf automake libtool asciidoc pkg-config)) + (list asciidoc autoconf automake libtool pkg-config)) (home-page "https://developers.yubico.com/pam-u2f/") (synopsis "PAM module for U2F authentication") (description From patchwork Sat Oct 26 22:42:29 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69492 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id D87B227BBED; Sat, 26 Oct 2024 23:43:41 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 813BC27BBE2 for ; Sat, 26 Oct 2024 23:43:41 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pVQ-0000Al-US; Sat, 26 Oct 2024 18:43:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pVO-000067-Am for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pVO-0007Ei-0h for guix-patches@gnu.org; Sat, 26 Oct 2024 18:43:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=FZc4XoXdaV0IOVWK0MPsb5lA160fqgjySzYqk4ztRY8=; b=X+tNTbwvCAf+B+4SbS8c1awUL0uFLj2hNT8M3CeBEEoVtBGQeIFwHkJTeYxNl/ieL/2P2KsSqZ18yM1zi02X2DQeGxSCY7txNx/1S08C8eXGdXGqkEg+DvOmZ0tW3zc6VQTe9B0zAeT74iP44yCuTly8qxsBeZFW9DPJeoW1co6r5VRiCJjQz1ETw5Vh+62FvIgGt4+GBiRRNCe9QcZnIi2wocDFPhwtAmI8ggqJbhCpr5VKo9vhaiWJxcMwGQIaT4MlPSWfJOdoJOQFcT24EjpVmZZMnw+sKxIfveGRuAHvfILk+5kVrM5HrEYv7g97pMKxZjMISHoxzv7choa9kw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pVv-0006lG-R6 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 08/24] gnu: darkhttpd: Update to 1.16. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:44:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998264625969 (code B ref 74035); Sat, 26 Oct 2024 22:44:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:06 +0000 Received: from localhost ([127.0.0.1]:43025 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVt-0006kX-J6 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:06 -0400 Received: from 4.mo581.mail-out.ovh.net ([178.32.122.254]:44391) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVn-0006j9-EY for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:00 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.140.177]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSD24RNz1JdP for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:24 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-hchs2 (unknown [10.110.113.47]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 0AAD81FE0C; Sat, 26 Oct 2024 22:43:23 +0000 (UTC) Received: from ngraves.fr ([37.59.142.107]) by ghost-submission-5b5ff79f4f-hchs2 with ESMTPSA id tGYqM4twHWe9Fx4AcuuB1Q (envelope-from ); Sat, 26 Oct 2024 22:43:23 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-107S001ad668c6a-3ad2-4c4e-94e5-f985d2145895, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:29 +0200 Message-ID: <20241026224300.30694-8-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8109857032520393442 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdejnecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=FZc4XoXdaV0IOVWK0MPsb5lA160fqgjySzYqk4ztRY8=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982604; v=1; b=iVPCC2rkihrx1pXhp4cclCrxIvhqepNCaXke6OG7uzvmAM9eOcSKhGRsH2M/yT8DGIvbPSWI adnb55Yu4PMNjKop9FG+dyu5gwXvcTQtRPvpWXmY5dmgVxQk273LmRmeYaHOeETLETR4I+JKKXA VmBbAeE/XajN4NmEv84fJm6aZ163k36LsnHkFY/ZtIuMxCIaC/OfkazbmjripKxV9ZUn0/8hkvl lvpymSXksRtBV8uOnsapkb5EXbn510zgwj9z9d1T2gEFG3PH4HIaMQm5YuW6t3l5BWI/6zW3A8M /QfpYqfab8SAEe7EP+0uW+rjd9xfvxwVoWgvgd3fdcbwQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2024-23770 and CVE-2024-23771. * gnu/packages/web.scm (darkhttpd): Update to 1.16. [arguments]: Improve style. --- gnu/packages/web.scm | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 34739bf088..eb27d3448c 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -6417,7 +6417,7 @@ (define-public surfraw (define-public darkhttpd (package (name "darkhttpd") - (version "1.13") + (version "1.16") (source (origin (method git-fetch) @@ -6426,20 +6426,18 @@ (define-public darkhttpd (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "0w11xq160q9yyffv4mw9ncp1n0dl50d9plmwxb0yijaaxls9i4sk")))) + (base32 "15mmq1v8p50mm9wx5w6g4rlr40b7d044lw7rs1wyzdiw9lcnihvm")))) (build-system gnu-build-system) (arguments - `(#:make-flags - (list (string-append "CC=" ,(cc-for-target))) - #:tests? #f ; No test suite - #:phases - (modify-phases %standard-phases - (delete 'configure) ; no configure script - (replace 'install - (lambda* (#:key outputs #:allow-other-keys) - (install-file "darkhttpd" - (string-append (assoc-ref outputs "out") - "/bin"))))))) + (list + #:make-flags #~(list (string-append "CC=" #$(cc-for-target))) + #:tests? #f ; No test suite + #:phases + #~(modify-phases %standard-phases + (delete 'configure) ; no configure script + (replace 'install + (lambda _ + (install-file "darkhttpd" (string-append #$output "/bin"))))))) (synopsis "Simple static web server") (description "darkhttpd is a simple static web server. It is standalone and does not need inetd or ucspi-tcp. It does not need any From patchwork Sat Oct 26 22:42:30 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69505 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 7BBD427BBE9; Sat, 26 Oct 2024 23:44:50 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id AAC2B27BBE2 for ; Sat, 26 Oct 2024 23:44:48 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWI-0000wC-1M; Sat, 26 Oct 2024 18:44:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWG-0000vv-Ex for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWG-0007RE-67 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=ltmM+klftrK1fgckbwRS7sp//sQEYmMV1fiUR0M1yf4=; b=U0+YcpqaY9wTH8dv5f9uPFNxV0WHOxi6h4fWlusPkx5AJgLhvscjVOug2S+4CgdKq18gcBl9NwAgx8t0S5YfYGn1TKyG5kC5FWzsfQRr8jW4jpn8AriJBV+NKGxi7bpmQMo6PzqMI9LtXZUAwhZBseowrYUc/zAMSnKtPiDlaUhQCBi2ScHMTQ2Bpf7C0s9TuQmZzvVX8Ebrz9YtQxBeHia3lb1s0FzPY73uu/Rjs8EC6gG0eVouNB+SLz+xfaf/dE3siXVDGH3KCZj0fesu1BZ6ovP+CZk/7/Mk0X4wsZBgjScmRjPzOw82qIZWo00t2GGpkup8hGYj2N9CIMGNvQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006pt-1P for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 09/24] gnu: xlsxio: Update to 0.2.35. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265526047 (code B ref 74035); Sat, 26 Oct 2024 22:45:01 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:15 +0000 Received: from localhost ([127.0.0.1]:43041 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW3-0006m3-Ef for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:15 -0400 Received: from 19.mo582.mail-out.ovh.net ([188.165.56.177]:46075) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVt-0006kA-Ce for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:06 -0400 Received: from director10.ghost.mail-out.ovh.net (unknown [10.109.140.177]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSL1DDyz1JT0 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:30 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-r9hh7 (unknown [10.110.113.27]) by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id EE3481FD6B; Sat, 26 Oct 2024 22:43:29 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-r9hh7 with ESMTPSA id h1h5NJFwHWfaZRkANT5Cbw (envelope-from ); Sat, 26 Oct 2024 22:43:29 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G0036b9118b7-6706-48ac-a646-adb5831d8077, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:30 +0200 Message-ID: <20241026224300.30694-9-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8111545880832303842 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedvnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekvddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=ltmM+klftrK1fgckbwRS7sp//sQEYmMV1fiUR0M1yf4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982610; v=1; b=xdbzFkf+snUYtJNejqpIGQKA/U7lA8dLUf0/5FyhmFywSyoJmgbxFlzyRtAhXszcDlkIWW/4 mO+7iv1PNww0SYhESDto10lxrHXOURNydB0ADhcChrwrk19oUXc+i/BHBvsl79fUJdk+Uzmk+fn MU1JWknKQvg8Do5FkOFTPJuGVUlMo1PFObDZP0VraOMI8jcMRlSkaAkIxIJdvEen2MO48GrJqPX c+KImNJOzLPrEmi/hf2Kn0HWScRCkD92CPkUbFe3theyIEoAdWXaYDuTGAOQ140HoruTMI9RrEV GFGs6XloWO4ffIgIgXOzTNfwSldB01Twf2vHrkMDm762A== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-34795. * gnu/packages/xml.scm (xlsxio): Update to 0.2.35. --- gnu/packages/xml.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/xml.scm b/gnu/packages/xml.scm index cfd53a291a..4a3936b66d 100644 --- a/gnu/packages/xml.scm +++ b/gnu/packages/xml.scm @@ -1545,7 +1545,7 @@ (define-public xerces-c (define-public xlsxio (package (name "xlsxio") - (version "0.2.33") + (version "0.2.35") (source (origin (method git-fetch) @@ -1554,7 +1554,7 @@ (define-public xlsxio (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "16i3yd168kb63za7jpycpb2by4831gz7wi90vzifdf85csc8c70s")))) + (base32 "140ap2l3qy27z1fhqpkq3a44aikhr3v5zlnm9m8vag42qiagiznx")))) (native-inputs (list expat gnu-make minizip which)) (build-system gnu-build-system) From patchwork Sat Oct 26 22:42:31 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69504 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id DFE3227BBE9; Sat, 26 Oct 2024 23:44:37 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id A784727BBE2 for ; Sat, 26 Oct 2024 23:44:36 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWI-0000wv-N5; Sat, 26 Oct 2024 18:44:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWG-0000w3-TC for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:29 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWG-0007RK-Kg for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=QrA3HvGHnmMBY6EU55/q7kI1otKY9AgoX6arHGD93a4=; b=X6W0jUD8A6KImNvCU0XXpku/drX99Iuyfa/nCAl2SfgVULWWxJlkyvfRokWxyK37SAawEkhoDOdkQ4ZI5IXOvRM0cO5b4xL9ejEXFfNZ3tKh0Wndr4zSAFBqcg/MVbakw//Ib0GQ5qPLqIkT5RdTw726CtR/wku/BhVyR79ca0Gjurdn3/AdzgcW6o0qroq+2LKjg2ou4uZ8wv03CWAIC8ZiLpXqxvhQTQDO8cSk/rVVNHixfsUMe4f2RgoP1aiKSEW1d8Rgh808bgYHxvTRB4CARgAtntR8w6n+vdWMbOca9LEdhyVSAoINIe1EQ1LPpKp9GaaogOxWN4N2yRON3w==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006q1-GC for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 10/24] gnu: pypy: Update to 7.3.17. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265626056 (code B ref 74035); Sat, 26 Oct 2024 22:45:02 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:16 +0000 Received: from localhost ([127.0.0.1]:43043 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW3-0006m9-Rt for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:16 -0400 Received: from 3.mo575.mail-out.ovh.net ([46.105.58.60]:49731) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVu-0006kS-7o for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 Received: from director6.ghost.mail-out.ovh.net (unknown [10.108.2.210]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSM0TJNz1jLx for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nqj7f (unknown [10.110.113.27]) by director6.ghost.mail-out.ovh.net (Postfix) with ESMTPS id C75CE1FD0F; Sat, 26 Oct 2024 22:43:30 +0000 (UTC) Received: from ngraves.fr ([37.59.142.110]) by ghost-submission-5b5ff79f4f-nqj7f with ESMTPSA id o15OKZJwHWdxAxIA+mleeg (envelope-from ); Sat, 26 Oct 2024 22:43:30 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-110S004d31a8926-97dc-44fe-a7ca-2db013a45d54, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:31 +0200 Message-ID: <20241026224300.30694-10-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8111827354678452962 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgeefvdeutdevhffffeetieefveekfefhleeuueelvddvteduueelveegueejtdeknecuffhomhgrihhnpehphihthhhonhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddutdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=QrA3HvGHnmMBY6EU55/q7kI1otKY9AgoX6arHGD93a4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982611; v=1; b=fJDt6YTlltUyO7AnSskTbt4FC+5aIohVe7TedFMXMWKqOmHhhgpgzL+rElHeiQwhTPk8466X sPVJBlcXMC2sDa8ofuSHZslRHpdcp1EP6N/CQ9kOA0PN7InxYiv7n65EmSCv29TjeIEhW/4QYL4 fWKiFNX/sK35xq93GKwQ1AWmNjJpEqEGLVpBvrippiLuVQBBM9oc5xzL9f69DA1B6wbOnO+3Fdf DcC/+WslC6kw//BBc76wq+hubKCykEHW4NmZ+QpaGxi2QEJ3EAlEDpdgODJWZeDb50jzQL92to3 tYLEBACpFzs0fXjCVg/Vr9NtSl+gfipIDiB/tA/CD7i5w== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2022-37454. * gnu/packages/pypy.scm (pypy): Update to 7.3.17. --- gnu/packages/pypy.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/pypy.scm b/gnu/packages/pypy.scm index a39621b5ad..90986ac096 100644 --- a/gnu/packages/pypy.scm +++ b/gnu/packages/pypy.scm @@ -42,14 +42,14 @@ (define-module (gnu packages pypy) (define-public pypy (package (name "pypy") - (version "7.3.13") + (version "7.3.17") (source (origin (method url-fetch) (uri (string-append "https://downloads.python.org/pypy/" "pypy3.10-v" version "-src.tar.bz2")) (sha256 (base32 - "0v9s6pwrnaxqi5h1pvmaphj6kgyczx07ykl07hcx656h34y77haa")))) + "1xsbn9mbxi2kai4gg1nz6n6cbqsq60qh65f5l6ld7ip9g32lpmva")))) (build-system gnu-build-system) (arguments (list From patchwork Sat Oct 26 22:42:32 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69508 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 3347227BBEA; Sat, 26 Oct 2024 23:45:07 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 8A63327BBE2 for ; Sat, 26 Oct 2024 23:45:06 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWK-0000xz-Ro; Sat, 26 Oct 2024 18:44:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWH-0000wB-Ml for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:29 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWH-0007RY-E8 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=TGpMs2wlefHrHMs3Hdg+cT5DWp6IGui5Uy69oiqsxuw=; b=eahPutIjSdLnQtctN1vz4umIQhWs2/UOfjN3/5w+LiD3N9r2QFIo2jfEWGqQD05mV0LPsfx5EXAonlKdZ99nvqtEcNvOK12FLGofGbL2uDKPBaydmkBvneUf/KrXibRWnj17Zm3PVs/ecLTzgEifwdQ1PTN7W7nR7FhclYLmENex5fLD3xwZdBWyvMBnMzALB7BWkzKNYS4hyAIEXq2Vf9msRlgg3hakJR/1ewhKOaO5Pjpk9RZT5TpDT5suim01X6ydWEdmlsW5UJA3b9pLvqM2Cje7JPUVA1RZnUhK+dZzVCnDVrZM9ii4TRuwoNRekkoaWd1SGBxpTKH1VO64MA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWp-0006qH-9c for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 11/24] gnu: indent: Remove uneeded arguments. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265626064 (code B ref 74035); Sat, 26 Oct 2024 22:45:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:16 +0000 Received: from localhost ([127.0.0.1]:43045 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mD-7w for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:16 -0400 Received: from 2.mo581.mail-out.ovh.net ([87.98.143.68]:45689) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVu-0006ki-RF for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:07 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.109.139.212]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSM5L8Tz1JXh for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-nrxk9 (unknown [10.110.113.27]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8A9671FD47; Sat, 26 Oct 2024 22:43:31 +0000 (UTC) Received: from ngraves.fr ([37.59.142.103]) by ghost-submission-5b5ff79f4f-nrxk9 with ESMTPSA id zL/dFZNwHWfXVAIAGvTZWQ (envelope-from ); Sat, 26 Oct 2024 22:43:31 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-103G00551e757c0-abce-4457-8129-f0b7142d425a, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:32 +0200 Message-ID: <20241026224300.30694-11-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8111827354303062754 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdefnecuvehluhhsthgvrhfuihiivgepgeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=TGpMs2wlefHrHMs3Hdg+cT5DWp6IGui5Uy69oiqsxuw=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982611; v=1; b=XFVaBhjcGJlBN1cxtRNn6A7EJKnFlZPyfUJ+gEsViQh11jjd6h+b/rmSWRb/TqR2lj3+aHAZ xjTQPZuICZ7l0k4rsLO7apUxjFwAkW7s5Lnaa1gfCcvin2zpXN3RXqinz1YZZby4aZ5FVxFILBI gUxvrhJid3U+I2l//Bz9+eqQdZkyQQsyh+5ist9kbPonqR68uWBM9VBWYa+DfRuDZmT7A+rhgvq 1pmGJctDGERX58ZE+tYR6HH1Ex3L1i+swHesgBli0yyOWgQimxMu7TWERqzit4sCVHYvGGBcsrC 1unEvuyH/V0h5csilbnYcq3aTSmGru/TjJLmd7YPSnkvQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/code.scm (indent) [arguments]: Remove field. [native-inputs]: Remove automake. --- gnu/packages/code.scm | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index bbf10be987..094dd32982 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -881,33 +881,8 @@ (define-public indent (sha256 (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) (build-system gnu-build-system) - (arguments - `(#:phases - (modify-phases %standard-phases - (add-after 'unpack 'fix-docdir - (lambda _ - ;; Although indent uses a modern autoconf in which docdir - ;; defaults to PREFIX/share/doc, the doc/Makefile.am - ;; overrides this to be in PREFIX/doc. Fix this. - (substitute* "doc/Makefile.in" - (("^docdir = .*$") "docdir = @docdir@\n")) - #t)) - (add-after 'unpack 'fix-configure - (lambda* (#:key inputs native-inputs #:allow-other-keys) - ;; Replace outdated config.sub and config.guess: - (with-directory-excursion "config" - (for-each (lambda (file) - (install-file - (string-append (assoc-ref - (or native-inputs inputs) "automake") - "/share/automake-" - ,(version-major+minor - (package-version automake)) - "/" file) ".")) - '("config.sub" "config.guess"))) - #t))))) (native-inputs - (list texinfo automake)) ; For up to date 'config.guess' and 'config.sub'. + (list texinfo)) (synopsis "Code reformatter") (description "Indent is a program that makes source code easier to read by From patchwork Sat Oct 26 22:42:33 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69507 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 194F827BBEA; Sat, 26 Oct 2024 23:45:02 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 8521027BBE2 for ; Sat, 26 Oct 2024 23:45:01 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWJ-0000xQ-JU; Sat, 26 Oct 2024 18:44:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWI-0000wK-6D for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWH-0007Rd-TT for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=4F7VKYOXo9/NfQLJ39ger4rUzPryYgXbRA9pHDF0I7A=; b=NM27uqg6kVB2OTqbwfwJtkMkCB6vTy84Ru8BpC5AJG3ormLiHfufZnUxIIJugvw4xYXe2qlBXkmOtIU1cZbnOogY6rC6PhGnbLrAN5fUN5rin90h970oJQPPHs3oBI8MWyaGAO2Igviu5EN+zHIr/biQtial4Jf8iSMTtm2PsoT6xDef1mW8vDK40vvL6o+z1cx6IvmdQHzabOwAZxyK5eTwX3h/Yji4IHSftknCt4GsLZ5dDSP2eNz71y1G4IRuvVWkzpDFcrz51bUjm7yMDEdj8F3JEe/2UBKT8tFzKszvAes6DBoGdXA7my0a3VLICfRmtBZQ+ko3gl7MPcwOvA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWp-0006qT-Op for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:03 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 12/24] gnu: indent: Add patch for CVE-2024-0911. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265726073 (code B ref 74035); Sat, 26 Oct 2024 22:45:03 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:17 +0000 Received: from localhost ([127.0.0.1]:43047 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mL-M2 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from 2.mo576.mail-out.ovh.net ([178.33.251.80]:54765) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVw-0006l6-0j for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:09 -0400 Received: from director9.ghost.mail-out.ovh.net (unknown [10.108.25.2]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSN6qyHz1spm for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:32 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-j8lkq (unknown [10.111.182.110]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8B54D1FD1C; Sat, 26 Oct 2024 22:43:32 +0000 (UTC) Received: from ngraves.fr ([37.59.142.110]) by ghost-submission-5b5ff79f4f-j8lkq with ESMTPSA id HXycDJRwHWe/GR4ABgfSDw (envelope-from ); Sat, 26 Oct 2024 22:43:32 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-110S004dc3aa72b-f40b-4b68-858c-3b48e568f878, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:33 +0200 Message-ID: <20241026224300.30694-12-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8112108830875443938 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedugeelfeekhedugedvieffleekgeffiefhkeejudelveeuuefhheevtefghedtheenucffohhmrghinhepghhnuhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddutdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=4F7VKYOXo9/NfQLJ39ger4rUzPryYgXbRA9pHDF0I7A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982613; v=1; b=Da0j9oYzNPzgGJL7/4GMcq5bdOo2H9AZowTwzyfzpWxEOSIMeDDaw8dGu8UPllrymqmOAQ2J KlC25xzttnoAEBIErFtOZcMEG1vtcYSJgOaQG/dtHlbelIZt6JeuQpCpy/NoM2pekNKAbWBeL6O 4EQAHjhkalOSTbrTk/hAm70xb/mZ9PqTlfCgv7QE80ms8j+Dw5o70ajGOGLQUaems+kUfJ1QDbn TqOHj5nUw8SBXj0sOvFj5KoT1lybqLbBotY/OEf8oeiWANYdMKcVoBnJ2rfVHvRMYZ8GDm2+/f/ TTUbCWOMoatTVyaON9e0Wl+a3cm8Q/kiUsPkZicNgWBVg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/patches/indent-CVE-2024-0911.patch: Add patch here... * gnu/local.mk: ...here... * gnu/packages/code.scm (indent)[source]: ...and here. --- gnu/local.mk | 1 + gnu/packages/code.scm | 4 +- .../patches/indent-CVE-2024-0911.patch | 61 +++++++++++++++++++ 3 files changed, 65 insertions(+), 1 deletion(-) create mode 100644 gnu/packages/patches/indent-CVE-2024-0911.patch diff --git a/gnu/local.mk b/gnu/local.mk index d253b424bb..1a69a22aba 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -1559,6 +1559,7 @@ dist_patch_DATA = \ %D%/packages/patches/idris-test-ffi008.patch \ %D%/packages/patches/igraph-fix-varargs-integer-size.patch \ %D%/packages/patches/ilmbase-fix-tests.patch \ + %D%/packages/patches/indent-CVE-2024-0911.patch \ %D%/packages/patches/instead-use-games-path.patch \ %D%/packages/patches/intltool-perl-compatibility.patch \ %D%/packages/patches/irrlicht-use-system-libs.patch \ diff --git a/gnu/packages/code.scm b/gnu/packages/code.scm index 094dd32982..dda37528b8 100644 --- a/gnu/packages/code.scm +++ b/gnu/packages/code.scm @@ -879,7 +879,9 @@ (define-public indent (uri (string-append "mirror://gnu/indent/indent-" version ".tar.gz")) (sha256 - (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")))) + (base32 "15c0ayp9rib7hzvrcxm5ijs0mpagw5y8kf5w0jr9fryfqi7n6r4y")) + ;; Remove patch when updating. + (patches (search-patches "indent-CVE-2024-0911.patch")))) (build-system gnu-build-system) (native-inputs (list texinfo)) diff --git a/gnu/packages/patches/indent-CVE-2024-0911.patch b/gnu/packages/patches/indent-CVE-2024-0911.patch new file mode 100644 index 0000000000..4687d3f59a --- /dev/null +++ b/gnu/packages/patches/indent-CVE-2024-0911.patch @@ -0,0 +1,61 @@ +Upstream issue: https://lists.gnu.org/archive/html/bug-indent/2024-01/msg00001.html +Signed-off-by: Petr Písař +--- + regression/TEST | 2 +- + regression/input/comment-parent-heap-underread.c | 3 +++ + regression/standard/comment-parent-heap-underread.c | 5 +++++ + src/output.c | 2 +- + 4 files changed, 10 insertions(+), 2 deletions(-) + create mode 100644 regression/input/comment-parent-heap-underread.c + create mode 100644 regression/standard/comment-parent-heap-underread.c + +diff --git a/regression/TEST b/regression/TEST +index 7c07c2e..951b1a2 100755 +--- a/regression/TEST ++++ b/regression/TEST +@@ -40,6 +40,7 @@ BUGS="case-label.c one-line-1.c one-line-2.c one-line-3.c \ + macro.c enum.c elif.c nested.c wrapped-string.c minus_predecrement.c \ + bug-gnu-33364.c float-constant-suffix.c block-comments.c \ +- no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c" ++ no-forced-nl-in-block-init.c hexadecimal_float.c binary-constant.c \ ++ comment-parent-heap-underread.c" + + INDENTSRC="args.c backup.h backup.c dirent_def.h globs.c indent.h \ + indent.c indent_globs.h io.c lexi.c memcpy.c parse.c pr_comment.c \ +diff --git a/regression/input/comment-parent-heap-underread.c +b/regression/input/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..68e13cf +--- /dev/null ++++ b/regression/input/comment-parent-heap-underread.c +@@ -0,0 +1,3 @@ ++void foo(void) { ++/*a*/(1); ++} +diff --git a/regression/standard/comment-parent-heap-underread.c +b/regression/standard/comment-parent-heap-underread.c +new file mode 100644 +index 0000000..9a1c6e3 +--- /dev/null ++++ b/regression/standard/comment-parent-heap-underread.c +@@ -0,0 +1,5 @@ ++void ++foo (void) ++{ ++/*a*/ (1); ++} +diff --git a/src/output.c b/src/output.c +index ee01bcc..17eee6e 100644 +--- a/src/output.c ++++ b/src/output.c +@@ -290,7 +290,7 @@ void set_buf_break ( + /* Did we just parse a bracket that will be put on the next line + * by this line break? */ + +- if ((*token == '(') || (*token == '[')) ++ if (level > 0 && ((*token == '(') || (*token == '['))) + { + --level; /* then don't take it into account */ + } +-- +2.43.0 From patchwork Sat Oct 26 22:42:34 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69512 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id A04C927BBED; Sat, 26 Oct 2024 23:45:33 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 00C6D27BBE9 for ; Sat, 26 Oct 2024 23:45:33 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWM-0000z5-2k; Sat, 26 Oct 2024 18:44:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWI-0000ww-LQ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWI-0007Ro-Cp for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=cWQFYZlJPPhQJcOG4kfLM00gy8K7sOEexw7/v7P3OrA=; b=duQUv54gBbPgP2tWC17PDeONN5UG2mbcPA6wSPXxXFZB21PwwooMjIhol6rjbkf+fTUn+XZzFwxMdEv/KiJCCwyRE5T70Kb4NQe/3sDLmydBAEYmu8unetp/B1b+OAR3LKNgucMivlprjD2s75YuwYynF1vKkBzyFcStpsKRcs36e3PH5/ZnRKXR8rp4ihiUaiQ3B7U3Twu//nrDXxfOS4go5ufTQ5L9a4tP/kIqSe48oT2EA2DRbLvRAq6PgIsfusx4gH/Y6azY1JE1DGemkR5TLix+RKVawoF1mz28Hfyg3kYfy6nbDptATDs1t8ZSkudw1erJyQL2+AnsMNhsEA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWq-0006qc-8z for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 13/24] gnu: squashfs-tools: Update to 4.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265826081 (code B ref 74035); Sat, 26 Oct 2024 22:45:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:18 +0000 Received: from localhost ([127.0.0.1]:43051 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW5-0006mT-Cu for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from 2.mo583.mail-out.ovh.net ([178.33.109.111]:52027) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pVw-0006lR-Qn for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:09 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.108.17.89]) by mo583.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSP5CtFz1RtQ for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:33 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z9lq8 (unknown [10.110.96.108]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 81BC71FD27; Sat, 26 Oct 2024 22:43:33 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-z9lq8 with ESMTPSA id 5eHJGJVwHWff9gMAuZL+2g (envelope-from ); Sat, 26 Oct 2024 22:43:33 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001fd130c7d-49a6-4861-92ac-37967ebfe8d8, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:34 +0200 Message-ID: <20241026224300.30694-13-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8112390304805675746 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepvdehleeiffehtedvlefhffffjeefgfduhfetkeevheeiteduiedugfekuedtheejnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeinecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkeefpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=cWQFYZlJPPhQJcOG4kfLM00gy8K7sOEexw7/v7P3OrA=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982613; v=1; b=Sv7sjirNfpquNGRM2cdErPaz2LOu1gliyk46msVigdY1RjkxW9ou5aHgYLsFPdP9f3YGM+2o QuoWT33OcSpgU1gcKiWtss4z0z3YX36mg0fpeNdtjOZPv57Uf0SQesTWNX9WOAu8I25E2gYb/0+ 86FWIP+PsNHdTao74i3J5GQrKyXAgKcbAEVnPiQLkMY663KDrXj0iWCwdHgmKWnQ81mMq64Aw13 CNZ/WLOTioLXvXyRNLaVzEU6ux7UEzvfonsHPfU74VgxX0yF8lpNfA6+Ye7nb1dXQXCyqanzYuT rp53ykGoAcLzIkO/ROcMMPUPepvlAc6ITRY8VVRvfvYdQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2021-40153 and CVE-2021-41072. * gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1. [arguments]: Improve style. <#:make-flags>: Add INSTALL_MANPAGES_DIR value. <#:phases>: Remove phase 'install-documentation. Add phase 'patch-generated-source-shebangs. [native-inputs]: Add coreutils-minimal, help2man, which. [inputs]: Rewrite. --- gnu/packages/compression.scm | 52 ++++++++++++++++++------------------ 1 file changed, 26 insertions(+), 26 deletions(-) diff --git a/gnu/packages/compression.scm b/gnu/packages/compression.scm index a32b15a64a..b3eca16191 100644 --- a/gnu/packages/compression.scm +++ b/gnu/packages/compression.scm @@ -1023,7 +1023,7 @@ (define-public lz4 (define-public squashfs-tools (package (name "squashfs-tools") - (version "4.5") + (version "4.6.1") (source (origin (method git-fetch) @@ -1032,34 +1032,34 @@ (define-public squashfs-tools (commit version))) (file-name (git-file-name name version)) (sha256 - (base32 "18d4nwa22vgb8j2badngjngw63f0lj501cvlh3920wqy2mqxwav6")))) + (base32 "14nisidxx2d2qivyv7xfcg59qkj4fjiniir7nvymazdsng63gcr1")))) (build-system gnu-build-system) (arguments - `(#:tests? #f ; no check target - #:make-flags - (list (string-append "CC=" ,(cc-for-target)) - "XZ_SUPPORT=1" - "LZO_SUPPORT=1" - "LZ4_SUPPORT=1" - "ZSTD_SUPPORT=1" - (string-append "INSTALL_DIR=" (assoc-ref %outputs "out") "/bin")) - #:phases - (modify-phases %standard-phases - (replace 'configure - (lambda _ - (chdir "squashfs-tools"))) - (add-after 'install 'install-documentation - ;; Install what very little usage documentation is provided. - (lambda* (#:key outputs #:allow-other-keys) - (let* ((out (assoc-ref outputs "out")) - (doc (string-append out "/share/doc/" ,name))) - (install-file "../USAGE" doc))))))) + (list + #:tests? #f ; no check target + #:make-flags + #~(list + (string-append "CC=" #$(cc-for-target)) + "XZ_SUPPORT=1" + "LZO_SUPPORT=1" + "LZ4_SUPPORT=1" + "ZSTD_SUPPORT=1" + (string-append "INSTALL_DIR=" #$output "/bin") + (string-append "INSTALL_MANPAGES_DIR=" #$output "/share/man/man1")) + #:phases + #~(modify-phases %standard-phases + (replace 'configure + (lambda _ + (chdir "squashfs-tools"))) + (add-after 'patch-source-shebangs 'patch-generated-source-shebangs + (lambda _ + (substitute* (find-files "generate-manpages" "\\.sh") + (("print \"#!/bin/sh") + (string-append "print \"#!" (which "sh"))))))))) + (native-inputs + (list coreutils-minimal help2man which)) (inputs - `(("lz4" ,lz4) - ("lzo" ,lzo) - ("xz" ,xz) - ("zlib" ,zlib) - ("zstd:lib" ,zstd "lib"))) + (list lz4 lzo xz zlib `(,zstd "lib"))) (home-page "https://github.com/plougher/squashfs-tools") (synopsis "Tools to create and extract squashfs file systems") (description From patchwork Sat Oct 26 22:42:35 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69509 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id A468227BBEC; Sat, 26 Oct 2024 23:45:16 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 6025727BBEA for ; Sat, 26 Oct 2024 23:45:16 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWL-0000yn-Hq; Sat, 26 Oct 2024 18:44:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWJ-0000xI-3m for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:31 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWI-0007Rw-Ro for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=Z8DpA6Rm7qAaGkYqXvwOtUhxVCkkBu7c7a40oKHmYso=; b=eLgMHSmiCwr+XX8NieiaCoQOx/452Pdgbdm8tNpnYx2qa0lkZT28r7u0Gl6wbIre0L8wyh/S1TfpppiG/HDh9/k6wGKsfeyQQ3oFASySG4Yxt74cX9ES26gvOWK1NYix+qhh1xGpLlb6nXQk340LUzvx2ic6Bg+QNlEbbsAfuKVbqDNh/JvL2xMG3gvAa0PWwdy5ZQuDicbnNClMR+XTW2Y1GYWJHuPYpSu7aPo57MV2rVYfKPMDTkDT3Xyx8zeHxqFcQ/EPspXKV40leNMVZVBZHtBNQzTz+Hg6jWE8CE3wWYUV0dVnzVoUZLgr9K6QW61HA2foPDyuK7IusUVvrg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWq-0006qj-Nz for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 14/24] gnu: shapelib: Update to 1.6.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998265826093 (code B ref 74035); Sat, 26 Oct 2024 22:45:04 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:18 +0000 Received: from localhost ([127.0.0.1]:43053 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW5-0006mb-S5 for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:18 -0400 Received: from 7.mo584.mail-out.ovh.net ([178.33.253.54]:43715) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW1-0006lu-T3 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:14 -0400 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.25.134]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSV5DlMz1Nmv for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:38 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-hnsxs (unknown [10.110.164.42]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 767861FDF1; Sat, 26 Oct 2024 22:43:38 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-hnsxs with ESMTPSA id YCfjAppwHWcP3wIANM4foQ (envelope-from ); Sat, 26 Oct 2024 22:43:38 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R0020bd38f98-f6bd-40d0-81b1-d57aba23bbda, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:35 +0200 Message-ID: <20241026224300.30694-14-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8113797680205914850 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Z8DpA6Rm7qAaGkYqXvwOtUhxVCkkBu7c7a40oKHmYso=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982618; v=1; b=0nnD/gy8WGhkIhvt/quxoCb7MgZ8mluvkSgJEk8o6ZX3InWfRRvy73FAbdmpQP9KiDKKgTFt crti6pvoOJbSENyVIpIPRNydALbaiEKQOfePbVaGsfzIN3XA6Jeyp2oZhc3TqJO9miXyTIjRDsg nRvkSkclzzFmvVx9R7Z9tnEpYPq6+eifDZDZoTomq+0ElQcmwhQB4sUwUMnKBGmT3QmsOuOhPS1 J9spRtQlibDszDbk7Qx4AkQzx+3MZlI9byo07O6j+Z4ZWJtAxB86lEs7vH8cewRwu6mqgMjbh3p XZqJs4aMwdiCiw4RXBXzn4D4e70fvjYs8FBJM1u4dOoVg== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2022-0699. * gnu/packages/geo.scm (shapelib): Update to 1.6.1. --- gnu/packages/geo.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/geo.scm b/gnu/packages/geo.scm index 5d120b3c98..affa50c515 100644 --- a/gnu/packages/geo.scm +++ b/gnu/packages/geo.scm @@ -2574,7 +2574,7 @@ (define-public readosm (define-public shapelib (package (name "shapelib") - (version "1.5.0") + (version "1.6.1") (source (origin (method git-fetch) @@ -2583,7 +2583,7 @@ (define-public shapelib (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1lzch0jf6yqhw391phhafzw4ghmiz98zkf698h4fmq109fa2vhqd")))) + (base32 "0l67gp1618lcw7fg2iclbh016cqyw85s3cmd3qzx6aw0jq19hj8n")))) (build-system gnu-build-system) (native-inputs (list autoconf automake libtool)) @@ -2591,8 +2591,8 @@ (define-public shapelib (synopsis "Provides C library to write and update ESRI Shapefiles") (description "The Shapefile C Library provides the ability to write simple C programs -for reading, writing and updating (to a limited extent) ESRI Shapefiles, and the -associated attribute file (@file{.dbf}).") +for reading, writing and updating (to a limited extent) ESRI Shapefiles, and +the associated attribute file (@file{.dbf}).") (license license:gpl2+))) (define-public spatialite-tools From patchwork Sat Oct 26 22:42:36 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69510 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id CC4D827BBEA; Sat, 26 Oct 2024 23:45:16 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 2C6EB27BBE2 for ; Sat, 26 Oct 2024 23:45:16 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWL-0000yK-53; Sat, 26 Oct 2024 18:44:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWJ-0000xU-NJ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:31 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWJ-0007S2-CM for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=owoMQc4h4nyD8vs7AZyLnwpOJkDjgwTkvzRNTJzxe/o=; b=EUg2KmRPOY7QLvbp6kCvjAMYAdnLKUacnBqyn+Uz23dIGMB6nMxDOyann2HpFVKrU4BExf89CBPFFkIfSntMxe2NTVgsmeWyh7Nh5mR7bvusbr3GafWeFOZOhWLfP3ZbZ3sr7sYvrtOWvBGV7ar22XZBzxxRxHnv63I1GMx5F+3nyAHjIQbhxdW7cX9DEG0zKIrgafFLuuG+VBr4YNA/qdDINz0E7FSD6p8JYlBJs8928kb/ZIN+NzbvqP1xBl6IJPiRDJUVGuSgRyJgaj5WkIJGEvKaUW7pWrGCCbYuEEiHzbVge/sUK80FKt5HUUHq0MdzsfdZi1DS8UOxhxKeCg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWr-0006qr-7H for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 15/24] gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267626164 (code B ref 74035); Sat, 26 Oct 2024 22:45:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:36 +0000 Received: from localhost ([127.0.0.1]:43069 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWN-0006nu-IO for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from 11.mo584.mail-out.ovh.net ([46.105.34.195]:44907) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pW4-0006mI-O6 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:17 -0400 Received: from director2.ghost.mail-out.ovh.net (unknown [10.109.139.217]) by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSZ0ZPrz1Nmv for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:42 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zrs9p (unknown [10.110.118.228]) by director2.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 179C21FE47; Sat, 26 Oct 2024 22:43:39 +0000 (UTC) Received: from ngraves.fr ([37.59.142.99]) by ghost-submission-5b5ff79f4f-zrs9p with ESMTPSA id VcZxOppwHWeNkhYAcVD5iw (envelope-from ); Sat, 26 Oct 2024 22:43:39 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-99G003eca71070-c63f-4933-a920-c89048cc314f, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:36 +0200 Message-ID: <20241026224300.30694-15-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8114923579457069794 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudegucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhephffguedvffekiefffeeujefgfedvhfetueetvefggedvtdduudffheehvdeukeffnecuffhomhgrihhnpehgnhhomhgvrdhorhhgnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=owoMQc4h4nyD8vs7AZyLnwpOJkDjgwTkvzRNTJzxe/o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982622; v=1; b=2/Hpaao1FQBj/rjz+yAbCmojeaiuvyDj51ERc3k/OQ+ucPYq56rrOnp3sVCfvniec1NRjrSQ OOLhGN2emH59iqYaWhAv+3izP16ZpPW3r9PTtDvIoaCpHimXdVqD+74w8FdcxVIwT9KElFAyUzz nVhs1NtQPy1E29BC1j0UDpKrZs3Jnqz+22BObLUmNLIwQejF9368RxMM2rmWU59sqkFXuA6Nw2E mJwerm/T8jxySl92a//3mFncGDfRenKITJjb6BKWlNyKR6zYEgBz/4cvZroOvyww3gxq3E8pWjf Hzed6YxEF+/UhhmSctx0APMk0ZDlrjXgv2DjBvqqLQsGw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2021-39360. * gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba. --- gnu/packages/gnome.scm | 45 ++++++++++++++++++++++-------------------- 1 file changed, 24 insertions(+), 21 deletions(-) diff --git a/gnu/packages/gnome.scm b/gnu/packages/gnome.scm index 9b26819261..9abe433aa4 100644 --- a/gnu/packages/gnome.scm +++ b/gnu/packages/gnome.scm @@ -10591,28 +10591,31 @@ (define-public gsound (license license:lgpl2.1+))) (define-public libzapojit - (package - (name "libzapojit") - (version "0.0.3") - (source (origin - (method url-fetch) - (uri (string-append "mirror://gnome/sources/" name "/" - (version-major+minor version) "/" - name "-" version ".tar.xz")) - (sha256 - (base32 - "0zn3s7ryjc3k1abj4k55dr2na844l451nrg9s6cvnnhh569zj99x")))) - (build-system gnu-build-system) - (native-inputs - (list gobject-introspection intltool pkg-config)) - (inputs - (list gnome-online-accounts json-glib rest)) - (home-page "https://wiki.gnome.org/Projects/Zapojit") - (synopsis "Library for accessing SkyDrive and Hotmail") - (description - "Libzapojit is a GLib-based library for accessing online service APIs of + (let ((revision "1") + (commit "99d49bac5edc4afdcac742a0a142908e405597b0")) + (package + (name "libzapojit") + (version (git-version "0.0.3" revision commit)) + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://gitlab.gnome.org/Archive/libzapojit") + (commit commit))) + (file-name (git-file-name name version)) + (sha256 + (base32 "12frqg925rmic3rf37h5vs48xdy3mfi4ip24v0bl73h5sxy8n828")))) + (build-system gnu-build-system) + (native-inputs + (list gobject-introspection intltool pkg-config)) + (inputs + (list gnome-online-accounts json-glib rest)) + (home-page "https://wiki.gnome.org/Projects/Zapojit") + (synopsis "Library for accessing SkyDrive and Hotmail") + (description + "Libzapojit is a GLib-based library for accessing online service APIs of Microsoft SkyDrive and Hotmail, using their REST protocols.") - (license license:lgpl2.1+))) + (license license:lgpl2.1+)))) (define-public gnome-clocks (package From patchwork Sat Oct 26 22:42:37 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69516 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 1575727BBEA; Sat, 26 Oct 2024 23:45:44 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 9C3E527BBE2 for ; Sat, 26 Oct 2024 23:45:43 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWM-0000zd-AH; Sat, 26 Oct 2024 18:44:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0000xq-Ax for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0007SE-2Y for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; b=Fm2lxrFSoXT9RmqSWnjIfvJ+oT9gNR1l4Qz5DoiBhYDSTwmklGQmiqUnLmmPrgvtm32yehLF89bqDwiT/uwHDo+23Z9ny05GmSVqZPhp70VTBSsYVl11gj7iMNxLMB7yDOnj+qSBfPKXEuywjETr/jQ9si/nX/Lx85Fmlj7yEApRHPnKPylMJ98OOi7Af8XGPSr/Bxabq0XWw4+AywoIz9Cclv88Ik9VV/FSYxvyCEia2OvEFQUQOO7xtycKcauehF1oMVYPvzHL8Ydu8FNOz29pNdvsrcjRVZISmHoyFY51Z1D1rR29xIZbFkgceoOhck3sRT9OB5hyFhiAaJBiIw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWr-0006r0-Pi for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:05 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 16/24] gnu: gifsicle: Update to 1.95. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267626171 (code B ref 74035); Sat, 26 Oct 2024 22:45:05 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:36 +0000 Received: from localhost ([127.0.0.1]:43071 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006nx-8f for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from 7.mo560.mail-out.ovh.net ([188.165.48.182]:45113) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWG-0006n5-0b for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:28 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.148.29]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSn34bcz1Tpp for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-q595r (unknown [10.110.113.119]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 3DEA41FD91; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-q595r with ESMTPSA id rnn2B6lwHWdYXAIAZhMXkw (envelope-from ); Sat, 26 Oct 2024 22:43:53 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004215fae8b-4d6d-4213-af71-742c23048316, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:37 +0200 Message-ID: <20241026224300.30694-16-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8118019806977647330 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfelhedvtdeffefhhfdttdelffeikeejheefvdduvdekueejgeeffedutdekffevnecuffhomhgrihhnpehltggufhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=piVsU4UDyaXkKB2Z5n0yNkVfcexmoqaE9XDXUPt9IfE=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982633; v=1; b=d2VI4GWYeyZhcuibt9BnnAYwTM+v/5OBktg0y+URD4EdGtIoup8RUlOuMajlt4xQZLyoFjkV mbduhMN0qjRMNJ03F92sIcM9AAig4NHLds1JXrt5XOl4re+kLB49tXHWw7HcZPlcLbixEMnQbHI 93id11Fq24VDOZ0kaTigsP7oSiKs4jdztRe4Vuh2WC1Klz4f0C6n0qc4NhoF6jstfTlNt3IkWLT MVzrtlXPRMRHUQldrJCVjKFJQuVU7b7/AD9Dfc3Pv9HryoXJ5IEIgISut4/g+/paEidiDIxb3gp XoNmu0C9NTm/WNm7Z9gJbIIbJ2muzXzOEbF6lvh6QCyrQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-44821 and CVE-2023-46009. * gnu/packages/image.scm (gifsicle): Update to 1.95. --- gnu/packages/image.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm index 7f17c71aef..0d6593dc21 100644 --- a/gnu/packages/image.scm +++ b/gnu/packages/image.scm @@ -2172,14 +2172,14 @@ (define-public swappy (define-public gifsicle (package (name "gifsicle") - (version "1.94") + (version "1.95") (source (origin (method url-fetch) (uri (string-append "https://www.lcdf.org/gifsicle/gifsicle-" version ".tar.gz")) (sha256 - (base32 "16zq5wd6fyjgy0p0mak15k3mh1zpqb9rg6gqfpg215kqq02p1jab")))) + (base32 "0l69gn562l7a1l10zz1bfs756ipd682idgpk60qs3llz013icwdj")))) (build-system gnu-build-system) (arguments '(#:phases From patchwork Sat Oct 26 22:42:38 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69517 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id EB77727BBEA; Sat, 26 Oct 2024 23:45:46 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 91A1E27BBE2 for ; Sat, 26 Oct 2024 23:45:46 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWO-00011I-J5; Sat, 26 Oct 2024 18:44:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0000y2-SF for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWK-0007SJ-K4 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=nrWFafwgjABA9p+RKyIMsqhHNJKZat32odkcS7aorS4=; b=aBeleJkgFI4j4wL+ieKa9/Zoq+XjPuI9hL1FmhtkxqTO5zA0NYaPcEHki4p9TIr0WMiTOfHMCys+vZ7N5HjkAnBleTZkn1dLrSv07/pLMaUsUBWbEJxfX7ZTTc8i4VUMblzana0jgtlQDAVg/vruJxRuA6Gu7u2Gn6xyQ9Z1GLV1Ii8OhRT6ysMasl4RxBS0l9g0K6vpDSeQZFJUgKDSAbU0EyfoWai333IXCIdZQYwEMs0mep5p2L8b1CfE0inKCr7S8ZByUXBo3MtRPqx99JelTT04f7h9QCZfyNA7ovTp5r3U+eWTUzrbnQyyk1MmbIiVACcOLreLYfUycNJ8og==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWs-0006r8-EZ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 17/24] gnu: sendmail: Update to 8.18.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726178 (code B ref 74035); Sat, 26 Oct 2024 22:45:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43073 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006o4-KQ for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from 13.mo581.mail-out.ovh.net ([87.98.150.175]:42499) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWH-0006n7-76 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director4.ghost.mail-out.ovh.net (unknown [10.108.17.3]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSp18vtz1JRr for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-l4qp4 (unknown [10.110.188.17]) by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id EB52F1FD59; Sat, 26 Oct 2024 22:43:53 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-l4qp4 with ESMTPSA id DPuNMqlwHWf/axkAxqAzmA (envelope-from ); Sat, 26 Oct 2024 22:43:53 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G0045ee948d4-eb55-4bce-9123-e47305118189, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:38 +0200 Message-ID: <20241026224300.30694-17-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8118301282106139362 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepgfduhedvgeeiieeifeelkeduhedtheetudelfeevvdeihfekfeekieeiffehveevnecuffhomhgrihhnpehsvghnughmrghilhdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtudenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekuddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=nrWFafwgjABA9p+RKyIMsqhHNJKZat32odkcS7aorS4=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982634; v=1; b=AzuUCUnjHB7VGTOB4gFYOXhAe5RyGOj9sJo+QGrlI59mdi6eKxnP54ESXOJkygUUvBpDrNqj xChUfgqzwxJ+7Ec3S/dEXra5s7//k9KzTtdG2LLagQEwet0Nwg4VnvS+79bm4knHsHiWxYCahre h9PlSsFjjMkbLVCCMUpkk210dgtFC/JUszi5Txdo7OufbBSlaG9U/UXzn0pvXuzvNwd3e/qsxOD Wc7TN0Zz0yMgCLz37cBjoTcgBjzMRECKLrGBX9Hjh5OqbHtMDLcresY4CcRRo24l11Z6W/nynD8 tbx7iRIlLaJniX//oqMNUqA4XKcdNvFGTdey+ml3VOU8Q== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. --- gnu/packages/mail.scm | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 77be7626a9..63e0f24534 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -3122,7 +3122,7 @@ (define-public mhonarc (define-public sendmail (package (name "sendmail") - (version "8.15.2") + (version "8.18.1") (source (origin (method url-fetch) @@ -3130,8 +3130,7 @@ (define-public sendmail "ftp://ftp.sendmail.org/pub/sendmail/sendmail." version ".tar.gz")) (sha256 - (base32 - "0fdl9ndmspqspdlmghzxlaqk56j3yajk52d7jxcg21b7sxglpy94")))) + (base32 "0w07iw4imp9wvczd2mijns7zxl8p1wk29b9yrzvhcj4fqc4z7wfb")))) (build-system gnu-build-system) (arguments `(#:phases From patchwork Sat Oct 26 22:42:39 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69515 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id AA43D27BBE9; Sat, 26 Oct 2024 23:45:34 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 9045427BBEC for ; Sat, 26 Oct 2024 23:45:33 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWP-00012K-1V; Sat, 26 Oct 2024 18:44:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWL-0000yl-AD for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:33 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWL-0007SU-22 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=0LEHvRvyTCXad2YSHo4l/HLEPV68T9gyWkeXTnK7aUg=; b=ekU5hArfyIdeLj8In095yX2kU+cnzwELYDBi42OJksXKgxgCzPkrqk13v7EvFP74QENefsYV9EcYRXyCM64ijl08SpFXOTzG/pYq7eKAoRQf2CrokSJ1W0jLNHMRmO+/xk+mPeuFcSHhaefWFulb4Xe8SGZB6Tm+C8VjQ9RuWtmoL/TneLXSACNMTjJ165ru5ChTCASrjFsbJrxr2HO6X9yAOntUoe/0ru05fPx1fZs2LRN0/GMVcMdGV4pqhdcvuy7P5+g4W1nOXMSqFpKTaLAwfZQGS2ySep69Hs1r/11K0F6Rwm7XeG5oEIj9LJoaJgMa6U6faP0jkySf8e1E2A==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWs-0006rF-Uk for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:06 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 18/24] gnu: openvpn: Update to 2.6.12. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:06 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726189 (code B ref 74035); Sat, 26 Oct 2024 22:45:06 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43075 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWO-0006oB-Vu for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:37 -0400 Received: from 5.mo550.mail-out.ovh.net ([178.33.45.107]:48733) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWH-0006nE-RG for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director5.ghost.mail-out.ovh.net (unknown [10.109.140.200]) by mo550.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSp587vz1T9Y for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-rdg64 (unknown [10.110.178.25]) by director5.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7A3FB1FDD5; Sat, 26 Oct 2024 22:43:54 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-rdg64 with ESMTPSA id vt/SF6pwHWcxGR4AGFRN/A (envelope-from ); Sat, 26 Oct 2024 22:43:54 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R004506416ca-199d-4126-bd57-c28527a9d155, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:39 +0200 Message-ID: <20241026224300.30694-18-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8118301281888428770 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddvnecuvehluhhsthgvrhfuihiivgepfeenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehhedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=0LEHvRvyTCXad2YSHo4l/HLEPV68T9gyWkeXTnK7aUg=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982634; v=1; b=Ofl4zg3ODrq2Jw6f8VwjeIxdI8Ob5Jt07JNCUJEsrpkeDaEDw+gjHds6dzTkOAxCkif8Lrwc GeCb2drZ/uuAsmVIS7gzrLs9EpYk0GmF0+OKfAZKE/ZXhY+OqEyjZR3tXdnhVzaboZytkGThal1 m7jwyVZA51lqrHR96etSWfnYI+gUIrvmRfdW4APufw0VoWXOGDaAx8cJRijnvzjt60QiPLxW0hE NWU7OW/beIdC6OH9QA4JueD4W0FMCMuU1vckpgpyfF/hZBoByM0edybhARtvszuRR9fRdSmWX1O d2ssmoS1vB01757f4EPBP1JQDrL1G90/eJCdHLUaaP0tQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches Thix fixes CVE-2024-24974, CVE-2024-27459 and CVE-2024-27903. * gnu/packages/vpn.scm (openvpn): Update to 2.6.12. --- gnu/packages/vpn.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/vpn.scm b/gnu/packages/vpn.scm index 9f36595bfd..193b247779 100644 --- a/gnu/packages/vpn.scm +++ b/gnu/packages/vpn.scm @@ -867,7 +867,7 @@ (define-public openfortivpn (define-public openvpn (package (name "openvpn") - (version "2.6.7") + (version "2.6.12") (source (origin (method url-fetch) (uri (string-append @@ -875,7 +875,7 @@ (define-public openvpn version ".tar.gz")) (sha256 (base32 - "04wr0g97nmv81javym8r99mglmb86v1i49xmnmzf938x1cs7g67f")))) + "0a8r3bvg4aic9b7dix0h7990g3j1gq17wd3w6vqk8vk8xgfhyq8w")))) (build-system gnu-build-system) (arguments '(#:configure-flags '("--enable-iproute2=yes"))) From patchwork Sat Oct 26 22:42:40 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69514 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 5713427BBEA; Sat, 26 Oct 2024 23:45:37 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 2D59D27BBE9 for ; Sat, 26 Oct 2024 23:45:37 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWQ-00013j-GA; Sat, 26 Oct 2024 18:44:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWL-0000yx-P5 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWL-0007Sb-Gd for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=Fbvo79ed6HVx+HAbstqLDElMELFCfE2fm7Cn/kC7x7A=; b=R/vXGcb1i7onAbD3o7MGIOdQ/EslHhRsSc7TzAYswo9ZUIenyjSZdgvQ5rWKLKxpDzmhPcLIrWzUdYhveZm4wBBHkYUH8YYIynBrqacc2PYoQil+GhXq92OostU15m98Wtx/IvGHdSjwxJ7tiE7NQ9wjhfVG6fX8nQVvA6ExHmr03c56XrRtCuTK23/k6cVBb8Uz5MPuEMVSsMMOqFuYc72NlJ2jyQEobqEFZPTOlM1/L2gjPCDLYplH+UyBo9GRjqLmdLqya43B67XD2Pfba/vlEAeLe8RdajjQo2IvJ3JsRgGafZHZJYQyxXE+vInpqO8g5Pcbpx7Tw4HSiwtBzg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWt-0006rM-D0 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 19/24] gnu: youtube-dl: Deprecate package. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267726197 (code B ref 74035); Sat, 26 Oct 2024 22:45:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:37 +0000 Received: from localhost ([127.0.0.1]:43077 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oM-Cs for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:37 -0400 Received: from 6.mo575.mail-out.ovh.net ([46.105.63.100]:60799) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWI-0006nG-By for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:30 -0400 Received: from director9.ghost.mail-out.ovh.net (unknown [10.109.139.93]) by mo575.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSq525Lz1TFk for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:55 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.101.71]) by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 7EFD11FD1C; Sat, 26 Oct 2024 22:43:55 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id HWm/F6twHWc6nRYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:55 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002684d0636-4536-4ee7-8c87-61e1e9d0a137, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:40 +0200 Message-ID: <20241026224300.30694-19-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8118582756140376802 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelkeenucevlhhushhtvghrufhiiigvpeehnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejhedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=Fbvo79ed6HVx+HAbstqLDElMELFCfE2fm7Cn/kC7x7A=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982635; v=1; b=bIkYfg96Q2nj0dDs4Dz7A1y1BoElVsgAAQT/kVjTYGoNzv9Ge4cH/VrHH9v+LW8942FQG/12 kR1nJaYhJbVHymU9cM3rTEegNNbdpSpAGZlK1RAR6oNKCX2DSegFqQuLpsZWx5cNbvfFGm/KZBa 3IPAuORKBDJvqaVoDIE2cPYqIXeEP2Rr+yBBHjLLmSHH+u/wP/UbBpWTJcErF+Q6sWQIiykskWX zie65iC5nJ8Uo72G8WavB0yrAp6vb2lTgRLHUO13ic6G+SOLKbc0p76Ve3pqUJKSco+DuOUSft0 B56N5IX2PhhwKhvpmIkq/xmP629C4SG8pFzwcD9YHyBuw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This package is not developped anymore. * gnu/packages/video.scm (youtube-dl): Deprecate package. --- gnu/packages/video.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm index 92c0acef3c..9fca994b54 100644 --- a/gnu/packages/video.scm +++ b/gnu/packages/video.scm @@ -93,6 +93,7 @@ (define-module (gnu packages video) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix utils) #:use-module (guix packages) + #:use-module (guix deprecation) #:use-module (guix download) #:use-module (guix gexp) #:use-module (guix git-download) @@ -3084,7 +3085,7 @@ (define-public yle-dl video streaming services of the Finnish national broadcasting company Yle.") (license license:gpl3+))) -(define-public youtube-dl +(define-deprecated/public youtube-dl #f (package (name "youtube-dl") (version "2021.12.17") From patchwork Sat Oct 26 22:42:41 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69519 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 0B64F27BBEA; Sat, 26 Oct 2024 23:45:57 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 7D1E427BBE2 for ; Sat, 26 Oct 2024 23:45:56 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWO-00011z-SZ; Sat, 26 Oct 2024 18:44:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWM-0000zQ-6a for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWL-0007Sj-UE for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=HJTQtCycCpSf9vJMXGVPbShzezeUn1n31dE0uCrODeI=; b=njYtBWzWhME0uaw9HOBHKPBluSaxpSehvnq9RDQsMnF3jp2XDJ7NkWP/6zqK5QkIidfdvpMWdbuRZJs1aUNh5JVyyqmU2vBrV/Egc9xPMH9l7Vq3WMMjgg61W44K2QuriS9kCKoixBwaIsHV+T/g5EiuPpoZIGJRU7M3AQhb8SdZKn+pW3tRYx1Pgk+3bG8js8txBgPlUhUEr39X2PWQdbvcGkXEf59p3ipSZ8jq3IM3/SARVe8ZO8HmhURXDGQPkk1bz8lwa//O+2m98/27cPkaMuDVqkaemLlt2H+JchisJwmwHMxxHJQSYZMh/miSWQ7oTF9SuQJjy4PIywEPbQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWt-0006rU-R2 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:07 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 20/24] gnu: liblouis: Update to 3.31.0. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:07 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267826205 (code B ref 74035); Sat, 26 Oct 2024 22:45:07 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:38 +0000 Received: from localhost ([127.0.0.1]:43079 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oU-Ob for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:38 -0400 Received: from 18.mo582.mail-out.ovh.net ([46.105.73.110]:59593) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWL-0006nZ-SY for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 Received: from director11.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo582.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSt4QFsz1L5D for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:58 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-z975m (unknown [10.110.96.188]) by director11.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 5DB0A1FD91; Sat, 26 Oct 2024 22:43:58 +0000 (UTC) Received: from ngraves.fr ([37.59.142.98]) by ghost-submission-5b5ff79f4f-z975m with ESMTPSA id XP1WEK5wHWdDnRYALPVG/g (envelope-from ); Sat, 26 Oct 2024 22:43:58 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-98R002ddec64d4-163d-46fa-9755-117b99a7a3c6, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:41 +0200 Message-ID: <20241026224300.30694-20-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8119427179217543906 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvleelgeeffeetleekueegvdfhtedvueffiefhkedtleejkeduveelgfdufeduleenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddrleeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedvpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=HJTQtCycCpSf9vJMXGVPbShzezeUn1n31dE0uCrODeI=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982638; v=1; b=r2L4JAo/91uzWsrKMI3GXAWVqGa9z04tYeL4Y5RWeVYWzy6m50rH+cB+dzJV2AgUXmyRotmk WC4PTxN2j9Vb4zpA8qoXXc2Fmda+DM4Wsp8Qc4qQjCHmuk9p0Q5Pxg9CAd4c2AgWg5zmuosEWcs mIThd7xubi0uV0zBNALuq58pM334BNT8C6vKcJzgtkyIOKjqmy6aVDhY8uD9PKvEBfVCYnHz+OI Luxzvn1OTTpjjhXr8EovhBBAKo1SMvnmAFs0Y3WhmhBzaVnw5SkOgwVRGJlMjwmjn/6EDTaJQM4 GGXviUNaq8m9grzEE+QxAse4IMJqjfdLp24XYT1RLpnXw== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2022-26981. * gnu/packages/language.scm (liblouis): Update to 3.31.0. [arguments]: Improve style using gexps. [native-inputs]: Rewrite and replace python-wrapper by python. --- gnu/packages/language.scm | 47 ++++++++++++++++++--------------------- 1 file changed, 22 insertions(+), 25 deletions(-) diff --git a/gnu/packages/language.scm b/gnu/packages/language.scm index 78fcba4287..6a5e7927b4 100644 --- a/gnu/packages/language.scm +++ b/gnu/packages/language.scm @@ -10,6 +10,7 @@ ;;; Copyright © 2023 gemmaro ;;; Copyright © 2024 Efraim Flashner ;;; Copyright © 2024 Charles +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -338,7 +339,7 @@ (define-public libchewing (define-public liblouis (package (name "liblouis") - (version "3.15.0") + (version "3.31.0") (source (origin (method git-fetch) @@ -348,34 +349,30 @@ (define-public liblouis (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "1ljy5xsy7vf2r0ix0d7bqcr6qvr6897f8madsx9zlm1mrj31n5px")))) + (base32 "02bga2l4jiyrgfqdl27wszz5yd6h80n2dmq3p6nb2br83jywisfh")))) (build-system gnu-build-system) (outputs '("out" "bin" "doc" "python")) (arguments - `(#:configure-flags - (list - "--disable-static" - "--enable-ucs4") - #:phases - (modify-phases %standard-phases - (add-after 'install 'install-python-extension - (lambda* (#:key outputs #:allow-other-keys) - (with-directory-excursion "python" - (invoke "python" "setup.py" "install" - (string-append "--prefix=" - (assoc-ref outputs "python")) - "--root=/"))))))) + (list + #:configure-flags #~(list "--disable-static" "--enable-ucs4") + #:phases + #~(modify-phases %standard-phases + (add-after 'install 'install-python-extension + (lambda _ + (with-directory-excursion "python" + (invoke "python3" "setup.py" "install" "--root=/" + (string-append "--prefix=" #$output:python)))))))) (native-inputs - `(("autoconf" ,autoconf) - ("automake" ,automake) - ("clang-format" ,clang) - ("help2man" ,help2man) - ("libtool" ,libtool) - ("libyaml" ,libyaml) - ("makeinfo" ,texinfo) - ("perl" ,perl) - ("pkg-config" ,pkg-config) - ("python" ,python-wrapper))) + (list autoconf + automake + clang + help2man + libtool + libyaml + texinfo + perl + pkg-config + python)) (synopsis "Braille translator and back-translator") (description "Liblouis is a braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, From patchwork Sat Oct 26 22:42:42 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69513 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 0C25727BBE9; Sat, 26 Oct 2024 23:45:34 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED,URIBL_SBL_A autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 7685B27BBE2 for ; Sat, 26 Oct 2024 23:45:33 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWP-00012S-3p; Sat, 26 Oct 2024 18:44:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWN-00010p-Ba for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWN-0007T3-2t for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=MuQFZQbEBKTGfqy1DzhCyVd+c8xzDEBmFMZXC+f8L3o=; b=D8sQiyunQe8ZbFbvVbTtzPA+fyQihgNtas2yGwzrZsZrcejnXX6i4Gwd0Wh76BdktDPsxlJngKROagnh12MFRsueb2vytkdONvirhuIthBnexDp6D9xUlcAxPadQapqeYedGr2NMch8fyAThoDuJSDgTTad9793rRm5DnNJSdZdPy8cIKOyQ9t2KNpn200PULvw3N0cnsxrMTbHeJD0vdmSTOFWf+L66DkZMj7N4O2U8D7DxCa588bjxDq0Vdl7I/Io1V5a6ijdC8EcaAcsX+VRw0rQ1X7znTqm+pUjuvSjB5547GhFZsmjI64+zIg2s1pZ3r/s52+G3PWCGaHqheQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWu-0006rj-SV for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:08 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 21/24] gnu: unicorn: Update to 2.1.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998268026232 (code B ref 74035); Sat, 26 Oct 2024 22:45:08 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:40 +0000 Received: from localhost ([127.0.0.1]:43087 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWR-0006ol-6f for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from 3.mo560.mail-out.ovh.net ([46.105.58.226]:47765) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWM-0006na-IP for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from director3.ghost.mail-out.ovh.net (unknown [10.109.139.198]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSv3ypGz1Tpl for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-zrs9p (unknown [10.110.118.154]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 66AEE1FD24; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-zrs9p with ESMTPSA id hL3CD69wHWe+khYAcVD5iw (envelope-from ); Sat, 26 Oct 2024 22:43:59 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-102R00448903796-a4a5-4da5-be7c-325bff59200c, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:42 +0200 Message-ID: <20241026224300.30694-21-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8119708655365317346 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnheptddtjeefffegiedthfevuedujedtffffueeffeekvdduheelleettddvffeigfelnecuffhomhgrihhnpehunhhitghorhhnqdgvnhhgihhnvgdrohhrghenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeitddpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=MuQFZQbEBKTGfqy1DzhCyVd+c8xzDEBmFMZXC+f8L3o=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982639; v=1; b=w4LLG5evVM3pZcX2M/nRIZv+vW61z8YR3Hbvd8zuEakU4K+XzGxMY6BrSpm9LzYpTpN2iEIN oQqwT+Y33lPkQoGXkiIlIChSp7a0g9M6Gnbhqqk2sf1dikjvSrdvoou6OxBxC4bAepYdpsCcKBW VwVSxH3weWCrl/HOTPa/qiwbVPAVl5L1CAE2yWT6zlQdhaB8cXo53FBKB/Sb2h9Yze/L7zJb4Wf GEGO+v4J3j+bvtaQxfOCr4fFW8YcfM+wumZao91OMXIkbPaotLNpZiXyIKhHQM2+CdAuQHjuQbw QU49XHWH0Cr0DcnDxO3zpTSC43fEmFXCNiri0/oOUhexQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches Thix fixes CVE-2021-4296. * gnu/packages/emulators.scm (unicorn): Update to 2.1.1. --- gnu/packages/emulators.scm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/gnu/packages/emulators.scm b/gnu/packages/emulators.scm index f0a60c0b49..948e588c4c 100644 --- a/gnu/packages/emulators.scm +++ b/gnu/packages/emulators.scm @@ -3508,13 +3508,18 @@ (define-public zsnes (define-public unicorn (package (name "unicorn") - (version "2.0.1.post1") + (version "2.1.1") (source (origin (method url-fetch) (uri (pypi-uri name version)) (sha256 - (base32 "0mlfs8qfi0clyncfkbxp6in0cpl747510i6bqymwid43xcirbikz")))) + (base32 "18sbrycr62wcs3a68a9q76ihpahfsd4bn3mryvyhimwwn1342kwh")) + (modules '((guix build utils))) + ;; cmake files are not in the cmake dir in pypi + (snippet #~(substitute* "src/CMakeLists.txt" + (("include\\(cmake/") + "include("))))) (build-system pyproject-build-system) (native-inputs (list cmake pkg-config)) (home-page "https://www.unicorn-engine.org") From patchwork Sat Oct 26 22:42:43 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69518 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 2229F27BBEA; Sat, 26 Oct 2024 23:45:55 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id C4E0027BBE2 for ; Sat, 26 Oct 2024 23:45:54 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWO-000112-2n; Sat, 26 Oct 2024 18:44:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWM-00010F-O2 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWM-0007Sq-Fa for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=U92cQpcMIFFvtafY+xePsreR0YecBHq4Z2qiMxsXF34=; b=d3XUMTYR/BnZxM36bmseRR3KSi7xGvG13pBy9qZosVbL0dghHNTagF/JvUZatQY/ByyltL1DUdFLc9eK/5hZ9yfpNfXD57+JqNnGV1Qx1iIL8YwMwRbyB2rvQMlMG3duAjpVQNkSo4WMW44HUzsBZz+6dbwX8Bl5zY/a0wPLpueTyEjJDJK9TBbindu2L5dE2oponEVPpmfhAHdA3mXpPDtMfmi5WyoakH+gULNNViWhpfFCPSSB8z/os4eifu+7SEMEG8uO+ccVI9hlMLo4ASfF9dxeDkIczQjAU0BTH3LZv2KapbGnGFS+G8/nzQvmfXokANd+yZUmPiFCOe45rw==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWu-0006rb-AJ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:08 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 22/24] gnu: Add sexpp. Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:08 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998267926218 (code B ref 74035); Sat, 26 Oct 2024 22:45:08 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:44:39 +0000 Received: from localhost ([127.0.0.1]:43083 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWQ-0006ob-Ek for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from 2.mo576.mail-out.ovh.net ([178.33.251.80]:46759) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWM-0006nc-I5 for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 Received: from director7.ghost.mail-out.ovh.net (unknown [10.108.9.204]) by mo576.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSw0LTFz1spm for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:00 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-rtzxm (unknown [10.110.96.188]) by director7.ghost.mail-out.ovh.net (Postfix) with ESMTPS id DD6BE1FDF5; Sat, 26 Oct 2024 22:43:59 +0000 (UTC) Received: from ngraves.fr ([37.59.142.96]) by ghost-submission-5b5ff79f4f-rtzxm with ESMTPSA id K3uwL69wHWc7UAAAn319VA (envelope-from ); Sat, 26 Oct 2024 22:43:59 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-96R001955793a0-f7c6-4c83-ae0c-d59393a4ce18, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:43 +0200 Message-ID: <20241026224300.30694-22-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8119990129108771554 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfgggtgfesthekredtredtjeenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpedvffehgeekhfekgffgleehffetiefggeeitdduteekfffhkeehveejfeejledtieenucffohhmrghinhepghhithhhuhgsrdgtohhmnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrdelieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegtdefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheejiedpmhhouggvpehsmhhtphhouhht DKIM-Signature: a=rsa-sha256; bh=U92cQpcMIFFvtafY+xePsreR0YecBHq4Z2qiMxsXF34=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982640; v=1; b=y4NrT/CwvppB8qbVSHG+cNbCEOvCO0vATe8i9wmyQyQNiWP6L2lMBRuln5Hz/TG8eq7niJ0X lKs2B97wNcPg6yUkCw9/tQma+ZJYB/jLHA/jmG/BIwiPWopEppXLBPtTztvj+OfbY7G3nxsoN+D +SJyau5jubpG2Po8JjGJxuY+qHLB1x/RpbAsxqsqNgv1oIOPWziN2IjY8qGWCwcZujSUgCTnjQF Z0GJfMNGw/xjNiXh2XBc9ZKJM3wmXZs+XYBctyvycYaQp+LhMBMZI4F/meHydhUqWXpaFf3/HSV etIV4CThVrViqiCwvKv85Ri6V4TPblGNPqNcBnx9HQX0g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/openpgp.scm (sexpp): New variable. --- gnu/packages/openpgp.scm | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 9b6f04b407..356908ab1f 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -1,5 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2020 Justus Winter +;;; Copyright © 2024 Nicolas Graves ;;; ;;; This file is part of GNU Guix. ;;; @@ -157,3 +158,26 @@ (define-public rnp license:asl2.0 ;; Nominet UK's BSD 3-Clause License (netpgp). license:bsd-3))))) + +(define-public sexpp + (package + (name "sexpp") + (version "0.9.0") + (source + (origin + (method git-fetch) + (uri (git-reference + (url "https://github.com/rnpgp/sexpp") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) + (sha256 + (base32 "16y9f42w6ay3w0s23xmigqm0qi1swdfvc93g2xn3xkg1r4kpmnwq")))) + (build-system cmake-build-system) + (arguments + (list #:configure-flags '(list "-DDOWNLOAD_GTEST=off"))) + (native-inputs (list googletest pkg-config)) + (home-page "https://github.com/rnpgp/sexpp") + (synopsis "C++ library for S-expressions") + (description + "This package provides a C++ library for working with S-Expressions.") + (license license:expat))) From patchwork Sat Oct 26 22:42:44 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69506 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 9EB5827BBEA; Sat, 26 Oct 2024 23:44:56 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 130C027BBE2 for ; Sat, 26 Oct 2024 23:44:56 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWY-00016A-2q; Sat, 26 Oct 2024 18:44:46 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWO-00011J-51 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWN-0007TF-MZ for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=ESl+kZ+ZXHMYLkX1kb3CXN6RS7I6+Z/oSRoSul3YtTs=; b=bNVOyTsv8eKMi6t9o90qKm3JTCA9EydfqslLDDT2Nz1xZBTDAgY0claW8Z7tO1t0LwVqmvi0ZNtZREtShOcjLKemPzjbboNDVTaiFom7TIkep+QZA8ToF2UNKZCW7w+HU3vqoLnd//+lFqralj/bVvhsbqIYqrJSebaOq0YMkDlAtzlr8KwLIA+rFV6Q0KfaTyu+Fw7kAEfRU1hMeu+PVTcKzTp/BSLLphEkg2356Yep3S/HIqNj9fR047QH/uAmXacz81RrW/TXVAQTQc/dnEp5SdG3ifEORrbj8rtTYu4ElvThw2gUkZcLsyQAgIaBZw/l3nXJmzJOqvCTqI8SCQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWv-0006rq-H5 for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:09 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 23/24] gnu: rnp: Update to 0.17.1. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:09 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998270326299 (code B ref 74035); Sat, 26 Oct 2024 22:45:09 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:45:03 +0000 Received: from localhost ([127.0.0.1]:43089 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006pu-1C for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:45:02 -0400 Received: from 19.mo581.mail-out.ovh.net ([178.33.251.118]:44071) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWP-0006oG-Oe for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from director8.ghost.mail-out.ovh.net (unknown [10.108.9.204]) by mo581.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSy53llz1Hr9 for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:02 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-shhdw (unknown [10.110.178.140]) by director8.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 8DCED1FDF1; Sat, 26 Oct 2024 22:44:02 +0000 (UTC) Received: from ngraves.fr ([37.59.142.101]) by ghost-submission-5b5ff79f4f-shhdw with ESMTPSA id kVaIG7JwHWdTNgEA9m+g4Q (envelope-from ); Sat, 26 Oct 2024 22:44:02 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-101G00490fb0991-3d9c-48b0-9922-bb6e750c6cd5, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:44 +0200 Message-ID: <20241026224300.30694-23-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8120553079084409570 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutddunecuvehluhhsthgvrhfuihiivgepheenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehkedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=ESl+kZ+ZXHMYLkX1kb3CXN6RS7I6+Z/oSRoSul3YtTs=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982642; v=1; b=Eg3xbg+hZVTxwUjnahg45i/hdGUW3TO7Se2cAT0vasO3fqn2JJI9qHbbTFaCMJ1Ze3uWsaLR qBNAxupXegf+etn/1LtMduTYc+VFEUjvJ9oNfVAQpXUOPUfB3FhuRr66h2KyePyTz8kj2XBpnAX vk7BrThB6NZ2IXTAPPgv1qlG3TMgaAX1Jz8+2B7m81ZMhrrh2y0hk8xCZ0ADlwJBLh8LUlUF76N SLjdOfnTjHGd6+1KxxR4vpN0Xu75iWzBpzuetFZXt7vmZUyOIzv9kVPYyo7BiaL3c1sunes4QGR XK1LJkR/kCXUnYjQY4Nj9RYetqhWgnTN39yOGzL7DszSQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-29479 and CVE-2023-29480. * gnu/packages/openpgp.scm (rnp): Update to 0.17.1. [arguments]: Improve style using gexps. <#:phases>: Add phase 'inject-sexpp-source. [inputs]: Add sexpp. --- gnu/packages/openpgp.scm | 52 +++++++++++++++++++++++----------------- 1 file changed, 30 insertions(+), 22 deletions(-) diff --git a/gnu/packages/openpgp.scm b/gnu/packages/openpgp.scm index 356908ab1f..baf786c5ee 100644 --- a/gnu/packages/openpgp.scm +++ b/gnu/packages/openpgp.scm @@ -23,6 +23,7 @@ (define-module (gnu packages openpgp) #:use-module (guix git-download) #:use-module (guix build-system cmake) #:use-module (guix build-system gnu) + #:use-module (guix gexp) #:use-module ((guix licenses) #:prefix license:) #:use-module (gnu packages) #:use-module (gnu packages check) @@ -98,10 +99,10 @@ (define-public dkgpg (license license:gpl2+))) (define-public rnp - (let ((day-of-release "2022-09-22")) + (let ((day-of-release "2024-05-14")) (package (name "rnp") - (version "0.16.2") + (version "0.17.1") (source (origin (method git-fetch) (uri (git-reference @@ -110,33 +111,40 @@ (define-public rnp (file-name (git-file-name name version)) (sha256 (base32 - "13z5kxm48a72w4m2crwgdjdng4a4pwxsd72r2z3a4pcakfp2swi8")))) + "052872b6a88vkcc58alxcm532y6dra5qqd997jga41v72h3pnj4d")))) (build-system cmake-build-system) - (arguments `(#:configure-flags - '("-DBUILD_SHARED_LIBS=on" - "-DBUILD_TESTING=on" - "-DDOWNLOAD_GTEST=off" - "-DDOWNLOAD_RUBYRNP=off") - #:phases - (modify-phases %standard-phases - (add-after 'unpack 'patch-tests - (lambda _ - (substitute* "src/tests/support.cpp" - (("\"cp\"") (search-input-file inputs "/bin/cp"))))) - (replace 'check - (lambda* (#:key tests? #:allow-other-keys) - (when tests? - ;; Some OpenPGP certificates used by the tests expire. - ;; To work around that, set the time to roughly the - ;; release date. - (invoke "faketime" ,day-of-release "make" "test"))))))) + (arguments + (list + #:configure-flags + ''("-DBUILD_SHARED_LIBS=on" + "-DBUILD_TESTING=on" + "-DDOWNLOAD_GTEST=off" + "-DDOWNLOAD_RUBYRNP=off") + #:phases + #~(modify-phases %standard-phases + (add-after 'unpack 'patch-tests + (lambda _ + (substitute* "src/tests/support.cpp" + (("\"cp\"") (search-input-file inputs "/bin/cp"))))) + (add-after 'unpack 'inject-sexpp-source + (lambda _ + (rmdir "src/libsexpp") + (symlink #$(package-source (this-package-input "sexpp")) + "src/libsexpp"))) + (replace 'check + (lambda* (#:key tests? #:allow-other-keys) + (when tests? + ;; Some OpenPGP certificates used by the tests expire. + ;; To work around that, set the time to roughly the + ;; release date. + (invoke "faketime" #$day-of-release "make" "test"))))))) (native-inputs (list gnupg ; for tests googletest ; for tests libfaketime ; for tests pkg-config python)) - (inputs (list botan bzip2 json-c zlib)) + (inputs (list botan bzip2 json-c sexpp zlib)) (synopsis "RFC4880-compliant OpenPGP library written in C++") (description From patchwork Sat Oct 26 22:42:45 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Graves X-Patchwork-Id: 69511 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id A860B27BBEA; Sat, 26 Oct 2024 23:45:18 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 6D43F27BBE2 for ; Sat, 26 Oct 2024 23:45:18 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t4pWX-00015O-RO; Sat, 26 Oct 2024 18:44:45 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t4pWO-00011y-HD for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t4pWO-0007TT-8Q for guix-patches@gnu.org; Sat, 26 Oct 2024 18:44:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=plDzbXvIvZ/KKZYFtVfcqL9jk++RjNlqv/6MLA6yRLY=; b=MwEdDnM8tUcDy7NTFFwzyDpm+BONEQcTFVfYkGcUrFF01lfuLwCCT2G2jwRamDLcgUduWpFrIsWwbqdnRjzfMUbrxvlwSWqn3g37RVe6eNMF+TIWHc0JeGZE6pzzdm3aSEb0YULakjaqCNtKVZyl/I/NUvPyZmjl+DQz5YrKKYzcKulLDP6i9neMrfiJ+Gc4PNTl0njUgZxX9rSoWDpjkGVZ5myCIrzbqf8cEuCEEIvuUk5nK7CZbuXKB3BusRt4g1d4K1vUOawQpEwa8dOIt5+zgDLUK6fB0PHGBijdreRzC0ibzW+AOqu2EDeGBPzzg5oj4lnow8Qam15ukeKZdg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t4pWw-0006ry-3s for guix-patches@gnu.org; Sat, 26 Oct 2024 18:45:10 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#74035] [PATCH 24/24] gnu: cjson: Update to 1.7.18. [security fixes] Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 26 Oct 2024 22:45:10 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74035 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74035@debbugs.gnu.org Cc: Nicolas Graves Received: via spool by 74035-submit@debbugs.gnu.org id=B74035.172998270326308 (code B ref 74035); Sat, 26 Oct 2024 22:45:10 +0000 Received: (at 74035) by debbugs.gnu.org; 26 Oct 2024 22:45:03 +0000 Received: from localhost ([127.0.0.1]:43093 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWo-0006q8-Pp for submit@debbugs.gnu.org; Sat, 26 Oct 2024 18:45:03 -0400 Received: from 9.mo561.mail-out.ovh.net ([87.98.184.141]:59943) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t4pWQ-0006oS-Dx for 74035@debbugs.gnu.org; Sat, 26 Oct 2024 18:44:39 -0400 Received: from director1.ghost.mail-out.ovh.net (unknown [10.108.17.183]) by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XbZSz2Xwzz1P5G for <74035@debbugs.gnu.org>; Sat, 26 Oct 2024 22:44:03 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-7f7jj (unknown [10.110.101.176]) by director1.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 252E81FD47; Sat, 26 Oct 2024 22:44:03 +0000 (UTC) Received: from ngraves.fr ([37.59.142.106]) by ghost-submission-5b5ff79f4f-7f7jj with ESMTPSA id uXq1ArNwHWcU5AIALPKLSA (envelope-from ); Sat, 26 Oct 2024 22:44:03 +0000 Authentication-Results: garm.ovh; auth=pass (GARM-106R006202cc4f4-0097-4981-a5f4-aa5298767451, E6BF9B87AE7FBE7894246B3B643E76DCC103CD4C) smtp.auth=ngraves@ngraves.fr X-OVh-ClientIp: 86.246.19.221 Date: Sun, 27 Oct 2024 00:42:45 +0200 Message-ID: <20241026224300.30694-24-ngraves@ngraves.fr> X-Mailer: git-send-email 2.46.0 In-Reply-To: <20241026224300.30694-1-ngraves@ngraves.fr> References: <20241026224300.30694-1-ngraves@ngraves.fr> MIME-Version: 1.0 X-Ovh-Tracer-Id: 8120834553188377314 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdejhedgudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhepleffjeetueethfefkeffffefvddukeejkefgleduiedthfekvefhiedvhfffgeegnecukfhppeduvdejrddtrddtrddupdekiedrvdegiedrudelrddvvddupdefjedrheelrddugedvrddutdeinecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopeejgedtfeehseguvggssghughhsrdhgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedupdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=plDzbXvIvZ/KKZYFtVfcqL9jk++RjNlqv/6MLA6yRLY=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1729982643; v=1; b=xlnfu0TZBhgNJccXegbpzreRVdgAMPpHH0yMicQP9JGnCJAwTQXICqvtHgOXofGczhN1OBSy 5pULu6Ea5rrUsoP8tWlmz0RPMKkllsgTXMDbaFDbk6gD/1gzlE9SsElvm/M2cP/guNgPOnAesDs I6ca4Gqb2fqwvXmZ/A1JNvgvjedjjHAvm7lxHml8UiTfZHEE3REuOSAxfIbd8sfTSAYOGsb4Yb/ iJNaX2TDphqoGK4w6RhS/9IFIHP2Gy1eUdUn9C1H41KdqxYfSH5RlrPk1D5e/nbhWw9rU5KyWq8 RrXPU3hr57sSSeN3B4MN78QqA3sLAjTInA/9TQ3OHnn1w== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches X-Patchwork-Original-From: Nicolas Graves via Guix-patches via From: Nicolas Graves Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This fixes CVE-2023-50471 and CVE-2023-50472. * gnu/packages/javascript.scm (cjson): Update to 1.7.18. --- gnu/packages/javascript.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/javascript.scm b/gnu/packages/javascript.scm index 4f97dcfef6..b48acf47dc 100644 --- a/gnu/packages/javascript.scm +++ b/gnu/packages/javascript.scm @@ -49,7 +49,7 @@ (define-module (gnu packages javascript) (define-public cjson (package (name "cjson") - (version "1.7.16") + (version "1.7.18") (source (origin (method git-fetch) (uri (git-reference @@ -57,7 +57,7 @@ (define-public cjson (commit (string-append "v" version)))) (file-name (git-file-name name version)) (sha256 - (base32 "00599lzzb0vszk317n0gln7wizdpchy4warxgpj3khrir73pphbb")))) + (base32 "08p37q4i3za3dgz7wynma1fh8y4rq7pyzyjzcda710nxrmsm1pyv")))) (build-system cmake-build-system) (arguments `(#:configure-flags '("-DENABLE_CJSON_UTILS=On")))