From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id oEcqL1d6vGL8WQAAbAwnHQ (envelope-from ) for ; Wed, 29 Jun 2022 18:14:15 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id UAcpL1d6vGKcEgEA9RJhRA (envelope-from ) for ; Wed, 29 Jun 2022 18:14:15 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EDBFA11B9A for ; Wed, 29 Jun 2022 18:14:14 +0200 (CEST) Received: from localhost ([::1]:52018 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o6aKT-0003hi-LD for larch@yhetil.org; Wed, 29 Jun 2022 12:14:13 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44158) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o6aKI-0003gr-Py for guix-patches@gnu.org; Wed, 29 Jun 2022 12:14:07 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:37884) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o6aKI-00040u-Hg for guix-patches@gnu.org; Wed, 29 Jun 2022 12:14:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1o6aKI-0007q0-BF for guix-patches@gnu.org; Wed, 29 Jun 2022 12:14:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#56302] Acknowledgement ([PATCH] gnu: ruby: Update to 2.7.6 [security fixes].) Resent-From: Remco van 't Veer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 29 Jun 2022 16:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 56302 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Maxime Devos Cc: 56302@debbugs.gnu.org Received: via spool by 56302-submit@debbugs.gnu.org id=B56302.165651923130101 (code B ref 56302); Wed, 29 Jun 2022 16:14:02 +0000 Received: (at 56302) by debbugs.gnu.org; 29 Jun 2022 16:13:51 +0000 Received: from localhost ([127.0.0.1]:60014 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o6aK7-0007pR-9b for submit@debbugs.gnu.org; Wed, 29 Jun 2022 12:13:51 -0400 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:40997) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o6aK3-0007pA-Er for 56302@debbugs.gnu.org; Wed, 29 Jun 2022 12:13:49 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id A97063200959; Wed, 29 Jun 2022 12:13:40 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Wed, 29 Jun 2022 12:13:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=remworks.net; h= cc:cc:content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to; s=fm1; t=1656519220; x=1656605620; bh=LhLAdJ/Xhj UGGSwvPcnpTBZFcBuNU+zYCJiX2ZkCdUc=; b=kJHrCyFklQV+58Gu0sPouAZI8P tpQoQ4sRbybgJaKCTBmAXYhAQU7fMvCvx9zN1RBgpa/uR5RisbZffmdY8gTg7fbM PXG89mfYtpPKs61AEAajZsjhPwERjT6gOe3iGcOKLEo+Tw7aYTr9dLcKZbIAsr/i 7uowrpNeaRpBIEHO8dqmU2KrruS1uJmDQ2KpMDRdU8Fu0DI1wl1y0pte5vASwmYc 6v4902bjPhA5XFINdeU3dOWJeGo02dYgCZ2aKAIvD9afmxzN+HdO0tvo20/bBQzd aBhPB/OrMPKNjfOmXyF1naHtwUu7bN9cfDA6AT+cX95nRl3xfrLsAWMRm2rA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:sender:subject:subject:to:to :x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm2; t=1656519220; x=1656605620; bh=LhLAdJ/XhjUGGSwvPcnpTBZFcBuN U+zYCJiX2ZkCdUc=; b=tuSrEJTdDButfuZhSW7+gkgJ2uuE9I49EMhVtaEleL4l QF7H6+RqgBT6jnSzfFjjgppmU/klj2LlZE6JkdR8waaKM4Q8P7nuMBEaqsI1GbqO z/UxNzRuR2YplqT8XTW/7eX3qG+E4LXMu+NmUkekJpjs77KNhqubnvSyaA17LPtn tFcYfPyE0ngJenPRlYv9wURxtwjgsGfHx0oAhFSvRlpRCbeBEMW9uggIfHZ4mZft xuh4NrAfGAgUmAlSjOok0HnU0VVovLeoi3Ry3HwgHPcQj2Bb9lwt4uLt2jPUvACa 14+JD4RhMBQsoEYJ/mhgMgTejvBDaDjKYvedFy3Chg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrudegledgleekucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfhgfhffvvefujgffkfggtgesthdtredttdertdenucfhrhhomheptfgvmhgt ohcuvhgrnhcukdhtucggvggvrhcuoehrvghmtghosehrvghmfihorhhkshdrnhgvtheqne cuggftrfgrthhtvghrnhepkeduveegfedufeelhedvuedvhfeufedtteevkeehhfeigfev lefhgeeukedtfeevnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilh hfrhhomheprhgvmhgtohesrhgvmhifohhrkhhsrdhnvght X-ME-Proxy: Feedback-ID: i568842cc:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 29 Jun 2022 12:13:39 -0400 (EDT) References: <20220629155533.5224-1-remco@remworks.net> <87a69vh377.fsf@remworks.net> <975d34406b3e636414efdeb2ff1d7dbd4e95d944.camel@telenet.be> User-agent: mu4e 1.6.11; emacs 28.1 From: Remco van 't Veer In-reply-to: <975d34406b3e636414efdeb2ff1d7dbd4e95d944.camel@telenet.be> Date: Wed, 29 Jun 2022 18:13:38 +0200 Message-ID: <875ykjh2h9.fsf@remworks.net> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1656519255; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=LhLAdJ/XhjUGGSwvPcnpTBZFcBuNU+zYCJiX2ZkCdUc=; b=VRx5tm4d2E13uU9baenqD+j91YOFRMdC/zafm/t3R9+J3deNEaEKnHZAr/n/RFqiiReBHS mnEpf9Xt0kZiUha/z9bn9qvF/xMxqbbgQXNeZgRssEbH6CcMDW63MJqgIoEjS9rv4m42NG 9i7MO/eX/qs4rrMQXvs6FiNjEonXUr55l8xj8+QLJBOPq6GrF8nBZFdDXQAFDFfCWXV8/u oGtv3O3EKwJpT5Ac3+IRcdnpghwM3fbjPqphBeYDLum/05068hK8icyZPtmudDvJqyFCtr HpoclcnCMhPtee0YhDNXYyPo4rHjaNuO/eZZkWdFU/TuvjEVY4UekygO9JDr8Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1656519255; a=rsa-sha256; cv=none; b=WQ0yIKmSP49f/pB9O+M0vdUh8oYEBuV2T30hdnRrofG6ibpQRj55/bLPKYPBacucnIw43B PIzlhHnrM1adzF18CbhIcrOM4LoTPjnp+kgjuwX2VnCTAtariWV43rY6YP3u1+T9lvGpdE M8qm20QWjoaed7fa/bkn059UKD+zTUHkaqFBBlJdjuPau7Q5NITGDn5TIBcZkqEfNDEH14 r5Jaxxv621A24+Up/gbNhqHzmA2nGTbKAXZhXNIHdfUfdqje9ZJ3R/LDl3gfsAVKv+xJ7M nvCgoF1tiq4XZV6h/WDJ4KMwmlXCaRT8QXO2ivlkCUcko619eyEaTxdF6RL2yg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm1 header.b=kJHrCyFk; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=tuSrEJTd; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 0.55 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm1 header.b=kJHrCyFk; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=tuSrEJTd; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: EDBFA11B9A X-Spam-Score: 0.55 X-Migadu-Scanner: scn0.migadu.com X-TUID: nG0OFKSD14gR 2022/06/29 18:04, Maxime Devos: > core-updates probably won't be merged for a long time, so a graft might > be needed in the meantime. So, keep this bug and make a new patch / bug for the graft? > Basically, what you need to do is: > > * keep the old ruby@2.7.4 package definition > * add a ruby@2.7.6 package (as (define-public ruby-2.7-fixed [...])) > * in ruby@2.7.4, add a field > (replacement ruby-2.7-fixed) ; security fixes > > and verify that some Ruby-using dependents still seem to work. > > That way, we can use a fixed ruby@2.7.6 on master. > > (This assumes that ruby is graftable -- this assumes that ruby is > ABI-compatible, otherwise the grafted dependents won't work.) Thanks for the explanation! I'll give it a try. Cheers, Remco