From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id IL+0DMWhEmGTtQAAgWs5BA (envelope-from ) for ; Tue, 10 Aug 2021 17:56:53 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id 0Fs/CMWhEmFAcwAAbx9fmQ (envelope-from ) for ; Tue, 10 Aug 2021 15:56:53 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id CD8721C0A for ; Tue, 10 Aug 2021 17:56:52 +0200 (CEST) Received: from localhost ([::1]:42708 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mDU7X-00084v-TF for larch@yhetil.org; Tue, 10 Aug 2021 11:56:51 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:49578) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mDU7N-00084h-BR; Tue, 10 Aug 2021 11:56:41 -0400 Received: from hera.aquilenet.fr ([185.233.100.1]:45714) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mDU7L-000404-R5; Tue, 10 Aug 2021 11:56:41 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id DBA9758; Tue, 10 Aug 2021 17:56:36 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id By_V3p-D6Ej2; Tue, 10 Aug 2021 17:56:36 +0200 (CEST) Received: from begin.home (unknown [IPv6:2a01:cb19:956:1b00:de41:a9ff:fe47:ec49]) by hera.aquilenet.fr (Postfix) with ESMTPSA id E7FB52E; Tue, 10 Aug 2021 17:56:35 +0200 (CEST) Received: from samy by begin.home with local (Exim 4.94.2) (envelope-from ) id 1mDU7G-000i25-HE; Tue, 10 Aug 2021 17:56:34 +0200 Date: Tue, 10 Aug 2021 17:56:34 +0200 From: Samuel Thibault To: Ricardo Wurmus Subject: Re: Hurd Security vulnerabilities, please upgrade! Message-ID: <20210810155634.ysjqffwwdv6nvmpc@begin> Mail-Followup-To: Ricardo Wurmus , guix-devel@gnu.org, debian-hurd@lists.debian.org, bug-hurd@gnu.org, hurd-bug@gnu.org References: <20210810020240.wpd5pksgdh5e2e3u@begin> <874kbxl2kd.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <874kbxl2kd.fsf@elephly.net> Organization: I am not organized User-Agent: NeoMutt/20170609 (1.8.3) X-Spamd-Bar: -- X-Rspamd-Server: hera X-Rspamd-Queue-Id: DBA9758 X-Spamd-Result: default: False [-2.50 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_FIVE(0.00)[5]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; SUBJECT_ENDS_EXCLAIM(0.00)[]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; BAYES_HAM(-3.00)[100.00%] Received-SPF: softfail client-ip=185.233.100.1; envelope-from=samuel.thibault@gnu.org; helo=hera.aquilenet.fr X-Spam_score_int: -11 X-Spam_score: -1.2 X-Spam_bar: - X-Spam_report: (-1.2 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org, debian-hurd@lists.debian.org, bug-hurd@gnu.org, hurd-bug@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1628611012; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=I3De79vqRnUbnOd360hIhz8uFK8p1ITpFOVYUXK6uRk=; b=QDiSnyhWj35Cl28/X59Z99OUGPHHnySgncrLkURItN5MYDYp1NpBS7Dtxp9YknZJuc4pXg NI4FIOq/SUtZc6WrKiHjH3i/NHbXmCuASo1emtwIrv49stwKTLBIpkkTIugNkO8JVNsz+w /n/w38qK/NOEM+wVL3kDDejRtPz10er/FRbHznZBEVNEEXU1B33NgnDk4jBU+jJ1MPT22P xVROmG81bxMQ5tHf6x8B9ix2pTFRgt7oJpCM/mm4LZ69kHJV6ZpJze/Rfm+sMDZxXHRqKo lny4x03SUe28RnSJTZ11zi/8FxTNOC9HSWhuSoNaIDBjnd+tQIYOrO4plB/0Ng== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1628611012; a=rsa-sha256; cv=none; b=N/eJhxO3OSapULHifTovWaAslu4NcCyJtq8OpLLm920u2U6n/qJb/8/7iMYy2KYs1gmT/q uAWfx3Wo8QALe1LzXbqdhrVDAiQplX8EVKc+tyOxMYKBEkGZ7/HpHIrIKyITUBoXmGKkME mwYXtgdJPrftOsJZH2WUYQmeO5D6gUDy2opv4gN0Y91FmZfjqqrmy3bXXT2taShgmNAgoV xvt8wo4TTpW5NB2HQEL+TMK3d9M6Cpg91ZEI7XVGdVsXrSC2lGfq0pLO6n9LXE0mk7rGwy yst2salpiVtpi+D+Il6JCB1ufyTNGJ12Guvsrr9wqAZN7hs5s1zeQJNbXaJTGg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -2.41 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: CD8721C0A X-Spam-Score: -2.41 X-Migadu-Scanner: scn1.migadu.com X-TUID: KeDdiRUbWuri Ricardo Wurmus, le mar. 10 août 2021 17:52:34 +0200, a ecrit: > I’m a little unclear on what this means for distributions like Guix. Should > we just update to the latest version from git? Are there specific commits > we should use if it’s not just the latest? Since Sergey's copyright assignment is not complete yet, it's not commited yet, so you have to pick up the patches from the debian repository. Samuel