From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id mCg3IYsS8WMJbQEAbAwnHQ (envelope-from ) for ; Sat, 18 Feb 2023 19:01:47 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 4JhMIYsS8WM7xAAA9RJhRA (envelope-from ) for ; Sat, 18 Feb 2023 19:01:47 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4AAE211B7F for ; Sat, 18 Feb 2023 19:01:47 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pTR0G-00022u-3X; Sat, 18 Feb 2023 12:28:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTR0E-00022f-Hl for bug-guix@gnu.org; Sat, 18 Feb 2023 12:28:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pTR0E-0002yh-97 for bug-guix@gnu.org; Sat, 18 Feb 2023 12:28:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pTR0D-0004gA-Tf for bug-guix@gnu.org; Sat, 18 Feb 2023 12:28:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#32026: [PATCH v3 10/11] gnu: nss-next: Update to 3.88.1 [fixes CVE-2023-0767]. Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 18 Feb 2023 17:28:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 32026 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Mark H Weaver Cc: 32026@debbugs.gnu.org, ludo@gnu.org Received: via spool by 32026-submit@debbugs.gnu.org id=B32026.167674126117959 (code B ref 32026); Sat, 18 Feb 2023 17:28:01 +0000 Received: (at 32026) by debbugs.gnu.org; 18 Feb 2023 17:27:41 +0000 Received: from localhost ([127.0.0.1]:44869 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pTQzt-0004fa-8d for submit@debbugs.gnu.org; Sat, 18 Feb 2023 12:27:41 -0500 Received: from mail-qt1-f170.google.com ([209.85.160.170]:44623) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pTQzq-0004fP-T3 for 32026@debbugs.gnu.org; Sat, 18 Feb 2023 12:27:39 -0500 Received: by mail-qt1-f170.google.com with SMTP id h22so807943qtb.11 for <32026@debbugs.gnu.org>; Sat, 18 Feb 2023 09:27:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=SQTzV0J8OOyoFhtxul7nr+cHGroD3jZQgJjdLzTREJk=; b=NcdzEtoOghRjrEoDS8xMEigoL/Zl3fIMAEMdYzumF0p1yCvcY2PcUqmp501vSNGHwa zU4Z2uPvV77ldZIop0CfSJLRj5/+J2NyV6bHbimRx1//D1J59fTz9DIioNuL+ZO50SgR 8oE1iUwL8qvmh0L6sUFyYvOPBiqXzjJ1TMUjdMW6DxsuCpZD55cScLoFe4yEneDh2FYG awXlGauu9XD4jVgw2aHbKoqkvUwKV3s7gOXX+2rSqh0RbwTeAIQ6pUd5Wl4rTUNHNen6 D4TxNmwvmYS0V8s0LsFcl8M5YZBndBDIHVanK8XXyEoFKpuOSs/qXreiHux97ynhA+3A E7eg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=SQTzV0J8OOyoFhtxul7nr+cHGroD3jZQgJjdLzTREJk=; b=jrygh0I68OXS1XIQkblrH5LXggFEd4n+JOX3DgL0h4CiZCwwODjC90ow311Vspdpri qOaQig811oq6Dsotdd+Nxuo390DXYh8JmXVtG2J/k6uDTnP+2sAN4ZeIqSy95Xr1Md7c oHzPBKP6Iz/a19NRz1av+N3eoCy0WjwbNK79mtNNe0CzM8Z+TEJmUlQY3o7wkJtO0GbG avJ584Nl/2LJuk05VnSxIFxPxsE/myl9QJEbpAEUFLax0LUl4ZqHwjX1GmZ5wkWEZ6VR mU65RTPvmM+k7RIy2BDos1NDajKRIWgB0fiBUoO4dM6H72HICYCAZI0//mOOE2CNDMLd zLcA== X-Gm-Message-State: AO0yUKU065mWhAv8599V/Tngv9sNK9JPDmFZvbEk0xZpwMJpv4482hDF Oa984pmp4+4uSWsRQ24v8BDtduHxcgugyI61 X-Google-Smtp-Source: AK7set/jRwlgwpaKurbBxwD34gKFhRzXeO/f9g8H55YQdhQgyI+B4jUGXLQf0D7FbqZ67Rg0N4YmfQ== X-Received: by 2002:ac8:5942:0:b0:3bd:140:4f4e with SMTP id 2-20020ac85942000000b003bd01404f4emr9784072qtz.2.1676741253380; Sat, 18 Feb 2023 09:27:33 -0800 (PST) Received: from hurd (dsl-157-123.b2b2c.ca. [66.158.157.123]) by smtp.gmail.com with ESMTPSA id d9-20020ac800c9000000b003b0b903720esm5501815qtg.13.2023.02.18.09.27.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Feb 2023 09:27:32 -0800 (PST) From: Maxim Cournoyer References: <20230217125539.24467-1-maxim.cournoyer@gmail.com> <20230217125539.24467-10-maxim.cournoyer@gmail.com> <873574dlal.fsf@netris.org> Date: Sat, 18 Feb 2023 12:27:31 -0500 In-Reply-To: <873574dlal.fsf@netris.org> (Mark H. Weaver's message of "Fri, 17 Feb 2023 16:38:31 -0500") Message-ID: <87r0umq3y4.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=NcdzEtoO; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1676743307; a=rsa-sha256; cv=none; b=kjgf0eOJCNY8uBnDW0kHELk6h3k8pR36nZwX8A+bx4F/smk1HVuUzr4Xt1XrfePXvjBceM 5WnBozg4ge3etVxlBi/4ytYU6EaWhEsoF6WfSG6WUm20Z/buzJMn1IMX2lxAORKMOTg8s3 5aEldipulkxatSQ4ksyLUaOQH7zXLJv2w+QmfTeRQtqbNen5WlYw/VekrOkzvqllE232Kk OS81xaONTOM8gFtsGWehzOUctquKThto512jh/k2GXJr4B1F5B4FgeUxmHXpm+SONmgMRR agkruQbP9fBF+AL1zu7Bbf96uCyQTweyRs8jo4Qgb95vnkpyIFbaLOobrjAMSQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1676743307; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=SQTzV0J8OOyoFhtxul7nr+cHGroD3jZQgJjdLzTREJk=; b=kAk76Nt9WGoyTLRpZTLrpL3XDS4aTiUPbYzu7xrWKxBDUOfGdHzlm9//sst7pTsx05tSzD 9fZMbw6rE/r2/oM0VvjCnXkxV0wbANiyKpX08uS5RGy/8mkLYNTaPVfE4bCvU6ynXqZCWq QNO0H5P4Eblmv9ovr97WAzBahDNPay9C+QnR0C/0osiiSeU/c4cVecFVWo2ccO9/yHwVYF 7pC1yKzWYrU8RhmeWrHiWFBS+RLOBztJcGaUid0rQoOSKfM4qWimFX2FqgDGiEtUARQ2zR p/Z18zMrHAQokcGJlkH0HchheUzTMQC21bzUR9ZxbXfmpdQ++wM3I8EaAKgbmQ== Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=NcdzEtoO; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) X-Migadu-Spam-Score: -2.03 X-Spam-Score: -2.03 X-Migadu-Queue-Id: 4AAE211B7F X-Migadu-Scanner: scn1.migadu.com X-TUID: tvGT0prCFych Hi Mark! Mark H Weaver writes: > Hi Maxim, > > Maxim Cournoyer writes: >> * gnu/packages/nss.scm (nss-next): Update to 3.88.1 > > This commit should be pushed immediately as an important security > update. It's already been pushed for nss-next, and Tobias has taken care of grafting our main 'nss' package, which has many dependents. See commits 246a3d90eac82966b691bdca4660ab9c5d802631 and b04ee227a47419291391a2b6e857e41ed1c32155, respectively. -- Thanks, Maxim