From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id yM+9LBl3gWHC+QAAgWs5BA (envelope-from ) for ; Tue, 02 Nov 2021 18:36:25 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id KCRyKBl3gWFmcwAAB5/wlQ (envelope-from ) for ; Tue, 02 Nov 2021 17:36:25 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 479C31685E for ; Tue, 2 Nov 2021 18:36:25 +0100 (CET) Received: from localhost ([::1]:44484 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mhxhw-0003fO-Gt for larch@yhetil.org; Tue, 02 Nov 2021 13:36:24 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53992) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mhxgc-0001uI-AE for bug-guix@gnu.org; Tue, 02 Nov 2021 13:35:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:54656) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mhxgb-0007Dp-W1 for bug-guix@gnu.org; Tue, 02 Nov 2021 13:35:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mhxgb-00088U-Rb for bug-guix@gnu.org; Tue, 02 Nov 2021 13:35:01 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#51564: [PATCH] gnu: webkitgtk: Fix configure failures. Resent-From: Mark H Weaver Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 02 Nov 2021 17:35:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 51564 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Liliana Marie Prikler , Leo Famulari , 51564@debbugs.gnu.org Received: via spool by 51564-submit@debbugs.gnu.org id=B51564.163587445731207 (code B ref 51564); Tue, 02 Nov 2021 17:35:01 +0000 Received: (at 51564) by debbugs.gnu.org; 2 Nov 2021 17:34:17 +0000 Received: from localhost ([127.0.0.1]:37969 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhxfs-00087H-Px for submit@debbugs.gnu.org; Tue, 02 Nov 2021 13:34:16 -0400 Received: from world.peace.net ([64.112.178.59]:55802) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhxfq-00086y-UI for 51564@debbugs.gnu.org; Tue, 02 Nov 2021 13:34:15 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mhxfj-0002ln-0t; Tue, 02 Nov 2021 13:34:07 -0400 From: Mark H Weaver In-Reply-To: References: <9ef270f42ae56ff7ef2729d56eee766aff6c9e54.camel@gmail.com> <87r1bymted.fsf@netris.org> Date: Tue, 02 Nov 2021 13:31:59 -0400 Message-ID: <87lf26mpjp.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1635874585; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=g9Sx7IHprNr1Ss6pfFmOLmQLAsBtMN9i8zKd6Xanrvc=; b=lCN1MLoSQyW/BPd9HAH5utVJSqyHxSe0gtGba3WyP3+d4CdRDz7hEAWpGWBMC3ByLHuGrG +H3dvO4GbYY9tPpPOMRyB8RFx5zHLf7rvBa3qn6oxECEd81lH+bFEuyweX3pNvl+wDNvZl aa9Wb3bpL3eeaGDFAn7hZUmsVNtfSZtr5dIweZg58Kd8zEYWS8gFQz5C4Y4UltbdGNyuYU sS4tXhbeD9bDBvVsYPT2HqWZnZ9KbrtvHmKk+W165C1idV2PuAEDDRC3u4+p8AP8ScaUS+ nS8BRW7hBTSoVEtMvt1U/UtyywfDzt8uSarkkiWK6fB/fHs4uT/pHcV9uk7n2w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1635874585; a=rsa-sha256; cv=none; b=Z/M8y/cPEC6gz4D7LRhbVclw/a18s/4P2rNeTS9oba7PxEWeD+FQ3K9savPi8Fzngu1sWt 9NtnrPsJheVgMIyk0ecRqrInV5kWX+IZFiFm8LXENG7VJVptJvD1+SeN86AhBdFoIu9Zvc IzCcEd4b/9mqkTrmJ3XQh8TD7zdxLoWBc/tJVTSBdP6MNXF6SDk8L/uDhOSgARFyuDurBW wmDsfgZi85i0hak0bm5NDIZGgTqI+CbKLYu8TLntlKYmU8i2NeySQGcKh5uFzzEASWFC9c 7ePFopjoE66fK1hmGoWkhOkpanyHfeN5wyXMZXsRgYwn8je7HVnHb+mLB6yKSA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.42 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 479C31685E X-Spam-Score: -2.42 X-Migadu-Scanner: scn0.migadu.com X-TUID: k+YN5lXHuZXT Hi Liliana, Liliana Marie Prikler writes: > I'm now trying 2.34.4 (same version and hash as c-u-f), which at least > appears to build further than the bug we both encounter. As far as I can tell, WebKitGTK 2.34.4 doesn't yet exist. The newest version available at , and the only release version that has fixed the announced security flaws, is 2.34.1, which is the one that we're failing to build successfully with GCC 7.5. The version of WebKitGTK that I see on 'core-updates-frozen' is not 2.34.4, but rather 2.32.4, which is the version we had on 'master' before the (apparently untested) security update commit 8797a07ac0. Unfortunately that version is vulnerable to CVE-2021-30846, CVE-2021-30851, and CVE-2021-42762, according to , Am I missing something? I don't have time to work on this today, but I have two suggestions: (1) look in the upstream git repo for updates that might fix this issue, or (2) try using a newer C++ compiler. Anyway, thanks very much for looking into it. Regards, Mark -- Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about .