From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kei Kebreau Subject: Re: [PATCH] gnu: w3m: Switch to Debian's actively maintained fork of w3m. Date: Fri, 04 Nov 2016 09:59:42 -0400 Message-ID: <87ins3wdkh.fsf@openmailbox.org> References: <87mvhgw4w0.fsf@openmailbox.org> <20161103221718.123dc755@centurylink.net> <20161104040309.GA5474@jasmine> <8760o31il3.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50705) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c2f2O-0005Av-7B for guix-devel@gnu.org; Fri, 04 Nov 2016 10:00:17 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c2f2K-0003I2-Of for guix-devel@gnu.org; Fri, 04 Nov 2016 10:00:08 -0400 Received: from smtp11.openmailbox.org ([62.4.1.45]:51992) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1c2f2K-0003GZ-G6 for guix-devel@gnu.org; Fri, 04 Nov 2016 10:00:04 -0400 In-Reply-To: <8760o31il3.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Fri, 04 Nov 2016 14:27:04 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Leo Famulari skribis: > >> On Thu, Nov 03, 2016 at 10:17:18PM -0500, Eric Bavier wrote: >>> On Thu, 03 Nov 2016 18:54:55 -0400 >>> Kei Kebreau wrote: >>>=20 >>> > From b837111e3ddf406a3b9235538f63af678e3ac741 Mon Sep 17 00:00:00 2001 >>> > From: Kei Kebreau >>> > Date: Thu, 3 Nov 2016 17:58:48 -0400 >>> > Subject: [PATCH] gnu: w3m: Switch to Debian's actively maintained >>> > fork of w3m. >>> >=20 >>> > Fixes some security issues seen here: >>> > >>> >=20 >>> > * gnu/packages/patches/w3m-upstream-20120522.patch: New file. >>> > * gnu/packages/patches/w3m-debian-updates.patch: New file. >>> > * gnu/packages/w3m.scm (w3m): Switch to Debian's actively maintained >>> > fork of w3m. >>> > [source]: Use Debian's tarball and patches. Remove obsolete patches. >>> > [arguments]: Remove unnecessary modification of %standard-phases. >>> > * gnu/local.mk (dist_patch_DATA): Register new patches. Remove obsole= te >>> > patches. >>> > --- >>> > gnu/local.mk | 6 +- >>> > gnu/packages/patches/w3m-debian-updates.patch | 28498 >>> > +++++++++++++++++++ >>>=20 >>> So theirs is the only actively maintained version of w3m and all they >>> can provide is a 28.5 thousand line patch? No VCS repository? There >>> must be some point at which it would be better for us to fetch the >>> patch in an origin rather than importing it into our repo. >> >> I think we build from their Git repo: >> >> https://anonscm.debian.org/cgit/collab-maint/w3m.git >> >> They even offer non-Debian-ized release tags, such as >> . > > Then we should use that instead of importing all the patches in our own > repo, IMO. > > Kei: would that work for you? > > Thanks, > Ludo=E2=80=99. It seems simple enough. I'll give it a go. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYHJRPAAoJEOal7jwZRnoNy+AP/1ROOmUw6K0Tiahovknag48v O/q8Inoz/fiHFpif0NwPMdsUV+GEnhBmzdvKPBUNtiQ6Po93VnmtgeR9+vb5/4Y2 DI5f4VTTC2eIZq+4OLsyGGacauIcdNdDq25rf2J1jq5+KRlaN/cfmJ+lUdmZijF5 YLNQ0/Llrrm+QwVgL6HoPClFacBdVY+h1KIbMKoXz6yYCJJayEDfdYgJ31W1K/JW 2FcvGu8aCVAchNlAAG/uTBdKkxS3cLEpSHqe1sszK7dDFvvSpa2wR/GC75vyNpeF BSqz7BnbKEaDAwXlXO1gnRYhAloLbvgFDoOGQBq9yYvWePyi3LRERJgRIE9hoZl0 MUJ3zQArisCP64ESMiSOKi8ml5f5+uDh4jaESaPRNT9D3AcVGsrJJnrfLQWJxC+u RIYCLM2EQP8Kn+E1iRkN1V/Pb3lH00aanQZ3EXa3GgJ56uyvrMzDx4lK2aSM8kWB jquKnyaQSE3LiBsHx80UlEVr1aFU5NsuUb2wkajDPG+DZ7j7XooQ0/zpSbXphVIb b12E4GyChjk40btiUQ71+WUxmpWxQUyuK3zR9ll+U7Dkdv3+syXIt81Vyq7mMnsc Ud1WC4m9j2GGuD/RCvrBdo3EgG1euLocGAfuPsTimxBhVegbcpNt0sapXN4ITxsP ggHpFEREAOgzFLJ9hozE =24YD -----END PGP SIGNATURE----- --=-=-=--