From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id IEWXMEVCLWZu1gAA62LTzQ:P1 (envelope-from ) for ; Sat, 27 Apr 2024 20:21:57 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id IEWXMEVCLWZu1gAA62LTzQ (envelope-from ) for ; Sat, 27 Apr 2024 20:21:57 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=retrospec.tv header.s=fm2 header.b=MR81CE58; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm3 header.b="K wtUYqt"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1714242117; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=K7qYoIgwIwQc94UfBvp0gYPYFn1qnpxhO0dllniAhXc=; b=k7m1KBzu9R3wPjWYxVmcKnp3U6LWFfKWL/EWNX2+z7lFOHf9ua0cqkKpj1GvBvMYRbKkox PXixDhAPKSJLlDXP07GBQVaf83L0gb8X5WNyG2xA+YnptmcfUumiEahPK/evtE1UbdjOo6 loofJeLCoSrhuWRTa6oxM6nJO/IO16nkvECBPSnuKMsuRvwjlrmJjtEbZQC1Qcgv/xuhDT IXtIjOAAF0AgMPUxgA4Oz3IcTB+XQSyS1OdnEeFEwezr5a11WgUVAtpQtbaze9DvlRd3D4 Ywxbxb+KkWxt0Q2CrSTkwjXsIYM5/sPijlmG8eNkrevxJ0Bty6qnSjz7hMeUIw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=retrospec.tv header.s=fm2 header.b=MR81CE58; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm3 header.b="K wtUYqt"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1714242117; a=rsa-sha256; cv=none; b=MSOhCY8MzCQH6WfF2vK/FlvVHdm5/FCbfnns4XRgD/tHuqWf6zShvVpJGQOuvgIBLwEv7W MKxGZKyaiXBPDV7PHfH8X7jLGv5KFF/s2WnOUb+BRIJewF2pMWZFnl/6UYgWR+p3feD4g+ uTezv0cqGWtlPQWqc/SAxB++Jjpt8rw3sErT0SpUgXpj48kboMU84cG22mB5Z0wTLxsvnj JiQfOab15GXZB6Z2EVOBeXnqQbEsKd+zXLW3wEf+CedLCXlQBTKYD+dC0ZLQlJywzDet94 9QSpexbVY2VFzkUO8r81DRYNQjrykkU0fonm3+1ZayfujWOS10C7CpJdHfur6g== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4BDDC7AA6E for ; Sat, 27 Apr 2024 20:21:57 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s0mgF-0003X6-AC; Sat, 27 Apr 2024 14:21:47 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s0mgC-0003Wj-LH for guix-patches@gnu.org; Sat, 27 Apr 2024 14:21:45 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1s0mgB-0004Yn-A0 for guix-patches@gnu.org; Sat, 27 Apr 2024 14:21:44 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1s0mgT-0004Wr-QI for guix-patches@gnu.org; Sat, 27 Apr 2024 14:22:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#67512] [PATCH v7 0/3] Add LibreWolf Resent-From: Ian Eure Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 27 Apr 2024 18:22:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 67512 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur Cc: 67512@debbugs.gnu.org, guix-devel@gnu.org, guix-security@gnu.org, Mark H Weaver , andrew@trop.in Received: via spool by 67512-submit@debbugs.gnu.org id=B67512.171424210617401 (code B ref 67512); Sat, 27 Apr 2024 18:22:01 +0000 Received: (at 67512) by debbugs.gnu.org; 27 Apr 2024 18:21:46 +0000 Received: from localhost ([127.0.0.1]:49674 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s0mgE-0004Wb-E1 for submit@debbugs.gnu.org; Sat, 27 Apr 2024 14:21:46 -0400 Received: from fhigh5-smtp.messagingengine.com ([103.168.172.156]:59835) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s0mgC-0004WV-58 for 67512@debbugs.gnu.org; Sat, 27 Apr 2024 14:21:44 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailfhigh.nyi.internal (Postfix) with ESMTP id E282611400D9; Sat, 27 Apr 2024 14:21:19 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Sat, 27 Apr 2024 14:21:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=retrospec.tv; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1714242079; x=1714328479; bh=K7qYoIgwIwQc94UfBvp0gYPYFn1qnpxhO0dllniAhXc=; b= MR81CE584HGALAoK36HZKZwNHurWxKjhGhiR9O3btj5M8d9S7F4LdBt/Dueytnwp g1pw9Iisy1Bq7pSnW65Bxkj60ew1woxEZ17tAYnPSzpFb9e9TBrgjIDtwuxLFS29 TW+Bn/C5eYTIDM1alprJ5MUCATK6XvJuRha17qkj0T3+UZKMF9zpPpmpFzd6MWzh gsbeQeCovPctX4hpqCqk98CeQ5HQ1+omdLoc1SdR8fFdTBL50+7ZVb1fJOVwZjTD c4t4WJAHe7sliONu6QqpN/hmHtUJ7z3vwMK9Q3+b/9yDJCpuUrfX5UG0R+Cqjgdg /dw9JB7oi/85lCcAHTNUtg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1714242079; x= 1714328479; bh=K7qYoIgwIwQc94UfBvp0gYPYFn1qnpxhO0dllniAhXc=; b=K wtUYqtsQX4OCggOzFr/Yu39YjERyGc9AnptEBTVN6dgrm22xw8/Imj7bFD6nxr9C XCBCO9iunTAFvMrf0c4ACQF0A6OO48F0oRBG7cruLgH3fLqnKinwpULwbmbHYthO 7iuR1EqxVxP/08nfZLGnc4RaG6nSKcANxiKYEdBq6nI1x5wcwU0vXtmEmd5TPKWE Hc0Cw8+WwsZ1Th5ARXVqPg1a2pgilADL/AEnnfyxR6QWBQfazA5RhlGCbO9YodLr ncYWGrz1qK5E/ZIKPrkTDTwA7JF/CZlAc46tU7TidmNGSN0FuPoQTanWnkzYvR6L zqfz8w/IYzLzdkrJEQRjw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrvddtuddguddvfecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefhvfevufgjfhgffffkgggtgfesthhqredttderjeenucfhrhhomhepkfgr nhcugfhurhgvuceoihgrnhesrhgvthhrohhsphgvtgdrthhvqeenucggtffrrghtthgvrh hnpeetudeliedtjefgieeuudeiueeludfgieevfeevudethedvheejgfdthfektefhieen ucffohhmrghinhepghhnuhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrh grmhepmhgrihhlfhhrohhmpehirghnsehrvghtrhhoshhpvggtrdhtvh X-ME-Proxy: Feedback-ID: id9014242:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 27 Apr 2024 14:21:18 -0400 (EDT) From: Ian Eure In-Reply-To: <87r0eqww7t.fsf@meson> (Ian Eure's message of "Sat, 27 Apr 2024 10:19:46 -0700") References: <87jzl27ml2.fsf@trop.in> <87il03gk24.fsf@lassieur.org> <87r0eqww7t.fsf@meson> User-Agent: mu4e 1.12.2; emacs 29.3 Date: Sat, 27 Apr 2024 11:21:16 -0700 Message-ID: <87r0eqekf7.fsf@retrospec.tv> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -2.50 X-Migadu-Queue-Id: 4BDDC7AA6E X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -2.50 X-TUID: 2zzYxxMKzHpV Ian Eure writes: > Cl=C3=A9ment Lassieur writes: > >> On Fri, Apr 12 2024, Andrew Tropin via Guix-patches via wrote: >> >>> On 2024-04-06 08:04, Ian Eure wrote: >>> >>>> Moves nss update to nss-3.98 / nss-certs-3.98 to avoid=20 >>>> rebuilding >>>> thousands of packages. >>>> >>>> Rebases. >>>> >>>> Ian Eure (3): >>>> gnu: Add nss-3.98. >>>> gnu: Add nss-certs-3.98. >>>> gnu: Add librewolf. >>>> >>>> gnu/packages/certs.scm | 16 + >>>> gnu/packages/librewolf.scm | 621 >>>> +++++++++++++++++++++++++++++++++++++ >>>> gnu/packages/nss.scm | 45 +++ >>>> 3 files changed, 682 insertions(+) >>>> create mode 100644 gnu/packages/librewolf.scm >>>> >>>> >>>> base-commit: ade6845da6cec99f3bca46faac9b2bad6877817e >>> >>> Hi Ian, >>> >>> tested those patches, didn't notice any issues. >>> >>> Added pipewire to LD_LIBRARY_PATH to make screensharing on=20 >>> wayland >>> to >>> work. >>> >>> Added librewolf.scm to gnu/local.mk. >>> >>> Pushed as >>> https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3D3dc26b4eae >>> >>> Thank you very much for you work! >> >> Thank you Andrew for reviewing. >> >> Now that this is pushed, is there anyone maintaining this >> "librewolf" >> package? This is serious work, with security updates quite=20 >> often. >> > > Hi Clement, > > I=E2=80=99m planning to continue sending patches for updates and the > like. Getting a working updater is close to the top of my list. > > >> Right now the package is subject to >> >> CVE-2024-3852 (high) >> CVE-2024-3853 (high) >> CVE-2024-3854 (high) >> CVE-2024-3855 (high) >> CVE-2024-3856 (high) >> CVE-2024-3857 (high) >> CVE-2024-3858 (high) >> CVE-2024-3859 (moderate) >> CVE-2024-3860 (moderate) >> CVE-2024-3861 (moderate) >> CVE-2024-3862 (moderate) >> CVE-2024-3302 (low) >> CVE-2024-3864 (high) >> CVE-2024-3865 (high) >> > > The version in Guix is the latest available. I=E2=80=99ll send in a=20 > patch > when the next release happens; I=E2=80=99m waiting on upstream for that. > Okay, I see that I=E2=80=99m incorrect about this -- LibreWolf is moving=20 onto Codeberg, but I was looking at their GitLab project, which=20 doesn=E2=80=99t have the recent releases. I=E2=80=99ll get this updated. Thanks, =E2=80=94 Ian