From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Maxime Devos Newsgroups: gmane.lisp.guile.user Subject: Re: 64-bit Guile on Windows Date: Tue, 28 Jun 2022 12:52:27 +0200 Message-ID: <6791233a2e66404803e97de8efb7ec6b9f77a174.camel@telenet.be> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-urdnGhAZbxl+M3duOGX0" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="9879"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Evolution 3.38.3-1 To: Jean Abou Samra , Thomas Thiriez , guile-user@gnu.org Original-X-From: guile-user-bounces+guile-user=m.gmane-mx.org@gnu.org Tue Jun 28 12:54:35 2022 Return-path: Envelope-to: guile-user@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1o68rb-0002MK-8N for guile-user@m.gmane-mx.org; Tue, 28 Jun 2022 12:54:35 +0200 Original-Received: from localhost ([::1]:54276 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o68ra-0008Ca-7R for guile-user@m.gmane-mx.org; Tue, 28 Jun 2022 06:54:34 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:33956) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o68pb-0006IA-OJ for guile-user@gnu.org; Tue, 28 Jun 2022 06:52:31 -0400 Original-Received: from xavier.telenet-ops.be ([2a02:1800:120:4::f00:14]:41342) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o68pa-0006Ey-2N for guile-user@gnu.org; Tue, 28 Jun 2022 06:52:31 -0400 Original-Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a]) by xavier.telenet-ops.be with bizsmtp id oasT2700F4UW6Th01asTNz; Tue, 28 Jun 2022 12:52:27 +0200 In-Reply-To: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1656413548; bh=0zW4WmhAxh1xDb5zy9yFQthA/E3OyZ5NAjLq+BiqiT8=; h=Subject:From:To:Date:In-Reply-To:References; b=PlaB29JR4/19QtTiM4/EXLCfTBcNDR9ZGY3o1n4vVV6YgYJAEF3/kDv0eRIBwE7uB UYS5398xhLODISs40HRZ3lM9OpxEgQv105s3P8SeLbmc7QbmoSCsCPBKcE6aHKyuL5 n5EBzgAl4X4bKKxvpL1f1w0c6SHotZo5dGEA6IKrfBwGsLub8xBAWRxRDVwjkK1ZFY w/hjc79JJTkFTsAEZ3T5c3DrBM97L8oT1UQAgnYSs8P2M2Bw0jyulk2b1jVi/zjI0a RCR0FC2i6+wOsIq6JXYqC1t7E/Hy0/ksrfGfh7m1WsMGUaL197ioxwMCvi4b78pbcF 22Fcx6BAXjMRQ== Received-SPF: pass client-ip=2a02:1800:120:4::f00:14; envelope-from=maximedevos@telenet.be; helo=xavier.telenet-ops.be X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guile-user@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Guile related discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-user-bounces+guile-user=m.gmane-mx.org@gnu.org Original-Sender: "guile-user" Xref: news.gmane.io gmane.lisp.guile.user:18354 Archived-At: --=-urdnGhAZbxl+M3duOGX0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Jean Abou Samra schreef op di 28-06-2022 om 10:38 [+0200]: > We had exactly the same problem at LilyPond, and this was the fix: >=20 > https://gitlab.com/lilypond/lilypond/-/blob/master/release/binaries/lib/d= ependencies.py#L721 >=20 For security, shouldn't this check the hash of the downloaded tarballls and patches? Greetings, Maxime. --=-urdnGhAZbxl+M3duOGX0 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYrrdaxccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7gpbAQCfo7Dra4GIYOK+iOPoKgbybLeh rA3SuwyS68Etoi6wGQD9FgU80NXuFbWjgwsQaLcJaCl5Lg+9y7ChDNdm04Xlzws= =FacV -----END PGP SIGNATURE----- --=-urdnGhAZbxl+M3duOGX0--