unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
From: Florian Pelz <pelzflorian@pelzflorian.de>
To: 70022@debbugs.gnu.org
Cc: Florian Pelz <pelzflorian@pelzflorian.de>
Subject: [bug#70022] [PATCH v3 1/3] doc: Warn about foreign distro Guix packages' security.
Date: Sat, 13 Apr 2024 09:18:50 +0200	[thread overview]
Message-ID: <3ebf53b234f198e123437b7928df5895eb7386fd.1712992731.git.pelzflorian@pelzflorian.de> (raw)
In-Reply-To: <cover.1711495227.git.GNUtoo@cyberdimension.org>

* doc/guix.texi (Binary Installation): Prefix installation instructions
with a warning.

Change-Id: I088c7f00f4c3c8e32bdfd117ea934942930f7513
---
 doc/guix.texi | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/guix.texi b/doc/guix.texi
index 5efbd00984..f6bbed1de3 100644
--- a/doc/guix.texi
+++ b/doc/guix.texi
@@ -741,6 +741,13 @@ Binary Installation
 may be older than @value{VERSION} but you can update it afterwards by
 running @samp{guix pull}.
 
+In the past, lately, security vulnerabilities in @command{guix-daemon}
+have been discovered and fixes for them have not yet been provided in
+foreign distributions' packages.  We advise those who install Guix,
+both from the installation script or by distro packages, to also
+regularly read and follow security notices, as shown by @command{guix
+pull}.
+
 For Debian or a derivative such as Ubuntu, call:
 
 @example

base-commit: 15a523ea213065c275e4852673cbb27c72c0ad87
-- 
2.41.0





  parent reply	other threads:[~2024-04-13  7:24 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-03-26 23:45 [bug#70022] [PATCH 0/2] Binary Installation: Add more distros Denis 'GNUtoo' Carikli
2024-03-27  0:17 ` [bug#70022] [PATCH 1/2] doc: Binary Installation: mention Trisquel package Denis 'GNUtoo' Carikli
2024-03-27  0:17 ` [bug#70022] [PATCH 2/2] doc: Binary Installation: add Parabola packages Denis 'GNUtoo' Carikli
2024-03-27 16:09 ` [bug#70022] [PATCH 0/2] Binary Installation: Add more distros pelzflorian (Florian Pelz)
2024-04-04 22:44 ` Denis 'GNUtoo' Carikli
2024-04-05 15:23   ` pelzflorian (Florian Pelz)
2024-04-12 12:00 ` [bug#70022] [PATCH v2 1/3] doc: Warn about foreign distro Guix packages' security Florian Pelz
2024-04-12 12:00   ` [bug#70022] [PATCH v2 2/3] doc: Binary Installation: Mention Trisquel package Florian Pelz
2024-04-12 12:00   ` [bug#70022] [PATCH v2 3/3] doc: Binary Installation: Add Parabola packages Florian Pelz
2024-04-13  7:18 ` Florian Pelz [this message]
2024-04-13  7:18   ` [bug#70022] [PATCH v3 2/3] doc: Binary Installation: Mention Trisquel package Florian Pelz
2024-06-06  0:53     ` Maxim Cournoyer
2024-04-13  7:18   ` [bug#70022] [PATCH v3 3/3] doc: Binary Installation: Add Parabola packages Florian Pelz
2024-06-06  0:56     ` Maxim Cournoyer
     [not found]       ` <5d44e7516a752ad4f24b3a02e6b7fcdd736c6cca.1717662556.git.pelzflorian@pelzflorian.de>
2024-03-27  0:17         ` [bug#70022] [PATCH v5 2/3] doc: Binary Installation: Mention Trisquel package pelzflorian (Florian Pelz)
2024-03-27  0:17           ` [bug#70022] [PATCH v5 3/3] doc: Binary Installation: Add Parabola packages pelzflorian (Florian Pelz)
2024-06-06  0:59   ` [bug#70022] [PATCH v3 1/3] doc: Warn about foreign distro Guix packages' security Maxim Cournoyer
2024-06-08 23:29 ` bug#70022: doc: Binary installation: Add more distros pelzflorian (Florian Pelz)

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3ebf53b234f198e123437b7928df5895eb7386fd.1712992731.git.pelzflorian@pelzflorian.de \
    --to=pelzflorian@pelzflorian.de \
    --cc=70022@debbugs.gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).