From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id OK5eM/tgCGRiSgAASxT56A (envelope-from ) for ; Wed, 08 Mar 2023 11:18:35 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id eOpuM/tgCGTsGwAA9RJhRA (envelope-from ) for ; Wed, 08 Mar 2023 11:18:35 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6AB9FC481 for ; Wed, 8 Mar 2023 11:18:35 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b="JIF/4uss"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1678270715; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=WPW5YZexM6XsPm9mlaC5dkE0EyVNXo1kK2eBK/vwTZI=; b=KZJp2g7NwjqQzEAhb2Dz0yFaT5DvydeeqfQkMMxu1SbcQT5FvAMX9G6OXTvDawlDYDR6AZ ecREFkS5zcVP/0SYC50QB+wphlNRAjJF0y+OsIznYFquMDbmDiEkImjiwJVCbtk9Yv5FFH c3UEpQs2aMUeHHGOSCBvpS0HSJ5g4Kp0rUmTaUo7gNKV3tUY4uvFshYy8FxjGyZlP6I+BH aLBbSwqCTulRWSabvXh01WcUdQ8t7D1bmyI09Y/puz6Wl+UDnsb96QMZZMq1n7W2ZNRjF1 mwbNoVj32hQiXSZ9h2RY/Y6Oezo9nkBQzggkqdxr7I5kbc8X3Kbfy9J4TusuZA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1678270715; a=rsa-sha256; cv=none; b=G1PdtGCX4SozvbFW4Vo9eCudbT9B2XVz7xk3aCsyfb4GKcCqS69X6oF4fQZ4loJ0rEKN+Y fA1L+56wOJcu5yQFnICF1pIFsmE5FoT3IEKXIsQPdKBZJPEyx/qY04Z+WwjwPoTxgX7uhC dc8xk9zvT+2tW18K1S9UUIkrzV4gWK8Pr0OObOGzsHeOK7791jajrFX4Ro4561XEEjTG1k yH+7AYTFZ5fjFZGQ+iSXHv2VZEj0UzAkjD9jH9bxf+UHkUPViPA/HsPUhsw2D30JctWx3V SzkFLDJfBm319jsswi5O2e9H/lnlQz+CbtmDftG/E91DweWWUhX5V3pu0wHFQw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b="JIF/4uss"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pZqs2-0001Ak-11; Wed, 08 Mar 2023 05:18:06 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pZqry-00019W-VZ for guix-patches@gnu.org; Wed, 08 Mar 2023 05:18:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pZqry-0003eb-NF for guix-patches@gnu.org; Wed, 08 Mar 2023 05:18:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pZqry-0004ZJ-JW for guix-patches@gnu.org; Wed, 08 Mar 2023 05:18:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#61583] [PATCH] gnu: git: Update to 2.39.2 [fixes CVE-2023-22490 & CVE-2023-23946]. Resent-From: Simon Tournier Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 08 Mar 2023 10:18:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 61583 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Famulari , Greg Hogan Cc: 61583-done@debbugs.gnu.org Received: via spool by 61583-done@debbugs.gnu.org id=D61583.167827064517486 (code D ref 61583); Wed, 08 Mar 2023 10:18:02 +0000 Received: (at 61583-done) by debbugs.gnu.org; 8 Mar 2023 10:17:25 +0000 Received: from localhost ([127.0.0.1]:47828 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pZqrM-0004Xx-L5 for submit@debbugs.gnu.org; Wed, 08 Mar 2023 05:17:24 -0500 Received: from mail-wr1-f42.google.com ([209.85.221.42]:38886) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pZqrK-0004XW-4B for 61583-done@debbugs.gnu.org; Wed, 08 Mar 2023 05:17:22 -0500 Received: by mail-wr1-f42.google.com with SMTP id h11so14807586wrm.5 for <61583-done@debbugs.gnu.org>; Wed, 08 Mar 2023 02:17:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1678270636; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=WPW5YZexM6XsPm9mlaC5dkE0EyVNXo1kK2eBK/vwTZI=; b=JIF/4ussQOcZcKsjyZYjRSUTKj2/bkSNU61GTzEOzeUogUQhZM+hM1aSyLlcbVmKcI VxC39Nn+85qugcK3SDNpJzcM9YewvFesfoeTTxq48GQ4HQ3mUaNCf97tA97IqFFgNWGe bExFoWKyGHjOg4IExJZkCX6xfb9hrLQ0iQKEeFfk9ynV3JfJPSgtpEs4M86+FSaWTQsF d22sKj3oUK+4iK39EBehOzWV2nTnhGgpmAdMUn3uixUdkE6oa66pUGlOwBfc57xgmBVi sIWhZA1Ba+PB54L3gzJ8x6ohuBy9eOSLG06tUFzq69aTmNx9voq+M0DvwdkTnU5Rr31a AL+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1678270636; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=WPW5YZexM6XsPm9mlaC5dkE0EyVNXo1kK2eBK/vwTZI=; b=lTVpN3vTybAV2VkpP9ip9OzyjJxxUSmnnO8ru7bqpHudiBMzlL6M/dLb5k++dIpg3e YlKcfhZGAnkBH2/lEagcm7omFFx1OlcfE0F+llXiJ9e07GWrPrAd0Gu07XI9Xveqeu+E HFCXSp+tAqULV8CkRdpqtcBCx8Z3SQo1qab7KZN9vhNHPO0nye0fJdqARrdtEn0Oa60G ycd1u3Ml+5z5S7yt+/+2UcMjg1jo6nGRP1d0vIADbf+Ej5wOa5+HUrySIjgdcvwmdjZu BilJgW1h9M2vAAWeW6te2esFoWcH1J/Mk8q/uaFOqyM071kQrzZqlnwl9NMIYZGk+166 35rg== X-Gm-Message-State: AO0yUKWy6cMQxX6KtK+LCF3Dy+R6FfEavqBK2hNK3Gc1LavoP5YPprSH 5BO39FrMBXyb3bze/Dnu8B+9S/WC6L8= X-Google-Smtp-Source: AK7set9Pwk6HgnB/AMY2noz0V/r37H+GNENH/KeUfEI1/1GtWQnW8DsIv2WG1dOkGZm2uaBfNj4CeQ== X-Received: by 2002:adf:de8e:0:b0:2c5:557f:93b8 with SMTP id w14-20020adfde8e000000b002c5557f93b8mr9899873wrl.7.1678270636106; Wed, 08 Mar 2023 02:17:16 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id z16-20020adfdf90000000b002c707785da4sm14777288wrl.107.2023.03.08.02.17.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 08 Mar 2023 02:17:15 -0800 (PST) From: Simon Tournier In-Reply-To: References: <20230217180402.29401-1-code@greghogan.com> Date: Wed, 08 Mar 2023 10:50:23 +0100 Message-ID: <86r0tz8tcw.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: X-Migadu-Scanner: scn0.migadu.com X-Migadu-Queue-Id: 6AB9FC481 X-Spam-Score: 4.20 X-Migadu-Spam-Score: 4.20 List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-TUID: TBMuHlRaTAcx Hi Leo, On Mon, 06 Mar 2023 at 12:23, Leo Famulari wrote: > Some more discussion on the subject on #guix IRC: > > http://logs.guix.gnu.org/guix/2023-03-06.log#175418 There is mentioned git-minimal/fixed and git-minimal/pinned. + git-minimal/fixed =3D grafted + git-minimal/pinned =3D that does not change Basically, the aim of git-minimal/pinned is to avoid =E2=80=9Cworld rebuild= =E2=80=9D when updating git-minimal. It is mainly used by some tests and it is safe to make few upgrades. See more details here: https://issues.guix.gnu.org/issue/61078 or the discussion starting here: https://issues.guix.gnu.org/issue/60042#msgid-c811d75e30752a591d9777368= 672dbdf801675b4 Cheers, simon