From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: [PATCH 0/1] Dbus update 1.10.12 for core-updates Date: Thu, 13 Oct 2016 22:19:56 +0200 Message-ID: <87vaww80ib.fsf@gnu.org> References: <87wphfgbw4.fsf@gnu.org> <20161012164137.GA32419@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42674) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bumU0-0007VA-9o for guix-devel@gnu.org; Thu, 13 Oct 2016 16:20:05 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bumTu-0005jl-S6 for guix-devel@gnu.org; Thu, 13 Oct 2016 16:20:03 -0400 In-Reply-To: <20161012164137.GA32419@jasmine> (Leo Famulari's message of "Wed, 12 Oct 2016 12:41:37 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari skribis: > On Mon, Oct 10, 2016 at 10:57:47PM +0200, Ludovic Court=C3=A8s wrote: >> Yeah, seems hard to exploit. Apparently even if we=E2=80=99re not using= systemd >> activations we could be vulnerable, because it=E2=80=99s about how speci= fic >> messages are processed, IIUC. >>=20 >> > What do you think? Should we update this on core-updates? >>=20 >> I think so. > > Okay. Just to clarify, this will trigger >1000 rebuilds. Well the answer was valid on Oct. 10th ;-), but at this point of the build progress I agree that it=E2=80=99s kinda problematic would probably recommend grafting. What are your thoughts? >>=20 >> > Should we graft it on master? >>=20 >> Unless there are possible ABI incompatibilies, it probably doesn=E2=80= =99t hurt >> to do that. > > According to the dbus README, the offer a stable ABI within each stable > release series: > > https://dbus.freedesktop.org/doc/README > > But, I found that the regular approach to grafting does not work for our > dbus package. Presumably, it's because (gnu packages glib) exports dbus > before defining it. The #:export at the top shouldn=E2=80=99t make any difference. In what way= does it not work? :-) Could it be an instance of ? Ludo=E2=80=99.