From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH] gnu: w3m: Switch to Debian's actively maintained fork of w3m. Date: Fri, 4 Nov 2016 00:03:09 -0400 Message-ID: <20161104040309.GA5474@jasmine> References: <87mvhgw4w0.fsf@openmailbox.org> <20161103221718.123dc755@centurylink.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="SUOF0GtieIMvvwua" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37619) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c2Viq-0003T7-09 for guix-devel@gnu.org; Fri, 04 Nov 2016 00:03:20 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c2Vim-0004G1-HL for guix-devel@gnu.org; Fri, 04 Nov 2016 00:03:20 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:60765) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1c2Vim-0004ER-D0 for guix-devel@gnu.org; Fri, 04 Nov 2016 00:03:16 -0400 Content-Disposition: inline In-Reply-To: <20161103221718.123dc755@centurylink.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Eric Bavier Cc: guix-devel@gnu.org --SUOF0GtieIMvvwua Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Nov 03, 2016 at 10:17:18PM -0500, Eric Bavier wrote: > On Thu, 03 Nov 2016 18:54:55 -0400 > Kei Kebreau wrote: >=20 > > From b837111e3ddf406a3b9235538f63af678e3ac741 Mon Sep 17 00:00:00 2001 > > From: Kei Kebreau > > Date: Thu, 3 Nov 2016 17:58:48 -0400 > > Subject: [PATCH] gnu: w3m: Switch to Debian's actively maintained fork = of w3m. > >=20 > > Fixes some security issues seen here: > > > >=20 > > * gnu/packages/patches/w3m-upstream-20120522.patch: New file. > > * gnu/packages/patches/w3m-debian-updates.patch: New file. > > * gnu/packages/w3m.scm (w3m): Switch to Debian's actively maintained > > fork of w3m. > > [source]: Use Debian's tarball and patches. Remove obsolete patches. > > [arguments]: Remove unnecessary modification of %standard-phases. > > * gnu/local.mk (dist_patch_DATA): Register new patches. Remove obsolete > > patches. > > --- > > gnu/local.mk | 6 +- > > gnu/packages/patches/w3m-debian-updates.patch | 28498 +++++++++++= ++++++++ >=20 > So theirs is the only actively maintained version of w3m and all they > can provide is a 28.5 thousand line patch? No VCS repository? There > must be some point at which it would be better for us to fetch the > patch in an origin rather than importing it into our repo. I think we build from their Git repo: https://anonscm.debian.org/cgit/collab-maint/w3m.git They even offer non-Debian-ized release tags, such as . --SUOF0GtieIMvvwua Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYHAh6AAoJECZG+jC6yn8IzYEP/1G6gaWflqq4rwzF7lL/pWly 6PoPSrWG3Lp2MSEDYoKhYTwuHgdZSTfhWeVi3bXcSeSwBSYUrcm9AiKwEiqU8KFx qrnDF4XfFylI5yPSDLQy2YbMBm1gBIlRnf/3JS1E1kwmwIraVBohY/H5Ers8ELNf TMBM5rFk/GjiFn9hq1lbmsq4aThnatclk3xPG31mzzf9byRA9OrTqmHah/78LCZr uGOoReKrVOisbiQsPubP3ZqCp/iCw5lasz1VggObAf9IozqozxIsKzLP+6OujBFG 9ANKbcBwA43CtghsQV6eOZ5TDCjHwalsi3V/U+S41J1Eq8LuqM8mhGXGjkjAaNSa kVvEqTkV3WToT0T72XM4uU+iS3RByP4qGdnGnPCvTageSQokj+ayTv2C7PHW4JjX 54aoIa7LTmQKJgPTZ+LIO1xTpNQ4uslHv+QcJ+xtiT8m4pk9MBCbegydRP2fxZXf 4kG4r29htPXaz0e+EpQGywGCLw6YL+V7kc8q8q22iRd6bmkuFiF0cGKBr1O9usiD TM++X2H0xWyOZmDiQ9sl41ejDsZvvEwLg4gF53UVS42t/tevkzPElg7yMxaYF2q0 lExpGHqAx8AZlYzQhcro/DzBaCQj+AOS90O+gAvzh20EVTKeDC4JJkFk0G1rCv1O kDTrp3r/fJq+vwmLW74Y =3W0l -----END PGP SIGNATURE----- --SUOF0GtieIMvvwua--