From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 2FsvBr21bmOOUgEAbAwnHQ (envelope-from ) for ; Fri, 11 Nov 2022 21:51:09 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 4HE5Br21bmMyHQAAauVa8A (envelope-from ) for ; Fri, 11 Nov 2022 21:51:09 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B3E401103A for ; Fri, 11 Nov 2022 21:51:08 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1otaRc-0004tp-EH; Fri, 11 Nov 2022 15:16:08 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1otaRZ-0004tf-SO for guix-patches@gnu.org; Fri, 11 Nov 2022 15:16:05 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1otaRW-0004cq-BY for guix-patches@gnu.org; Fri, 11 Nov 2022 15:16:05 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1otaRV-0000nl-Uh for guix-patches@gnu.org; Fri, 11 Nov 2022 15:16:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#59202] [PATCH] python-check-manifest: Relax git security settings in tests. Resent-From: Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 11 Nov 2022 20:16:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 59202 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 59202@debbugs.gnu.org X-Debbugs-Original-To: Received: via spool by submit@debbugs.gnu.org id=B.16681977163020 (code B ref -1); Fri, 11 Nov 2022 20:16:01 +0000 Received: (at submit) by debbugs.gnu.org; 11 Nov 2022 20:15:16 +0000 Received: from localhost ([127.0.0.1]:46804 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1otaQl-0000md-NJ for submit@debbugs.gnu.org; Fri, 11 Nov 2022 15:15:16 -0500 Received: from lists.gnu.org ([209.51.188.17]:52816) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1otaQj-0000mV-LU for submit@debbugs.gnu.org; Fri, 11 Nov 2022 15:15:14 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1otaQj-0004iu-B3 for guix-patches@gnu.org; Fri, 11 Nov 2022 15:15:13 -0500 Received: from mailin.dlr.de ([194.94.201.12]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1otaQd-0004T8-Pl for guix-patches@gnu.org; Fri, 11 Nov 2022 15:15:10 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=dlr.de; i=@dlr.de; q=dns/txt; s=052022; t=1668197707; x=1699733707; h=from:to:subject:date:message-id:mime-version; bh=dET83KSFY/LKgj3xPyuaEyB9w8/AXr83Tdb0lUUGXNU=; b=wF84xXuyX/YtghrrQlA5OQLGxz6Pgi0myGsV/fngeomgGtkxENxyrVSA ucKHisK2uFANU1tbyr5rsqHxV/EkSDYEm7elbfLUOrpVPM4QDp/817oAv ecLkyJ07cmh1WiosnRvGDuAx02gPXvuUYIg7MyrUBB+p1tKuaVg+9FRlR SVmhTZhBu51CnOxO0iZjfotuJ8o67KmDuNM2cOGmj8tw2Xhmkz6JQdbyA m0oV9D+Io4pb6VZMYX2hbCcVFyi3e8oejPM/tLeCWEMHyJzYTmvW0Ccvx /Lf9mNS2yNTbjqLSaBVq9zEszYe9CZodfDqOrGBFCSdbMPA7Wv3hw7zYj A==; X-IPAS-Result: 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 IronPort-PHdr: A9a23:SMWGRRyHRZ2Ca9jXCzLAylBlVkEcU1XcAAcZ59Idhq5Udez7ptK+Z hCZvqsm1QSVFcWDsrQY0bGQ6/ihEUU7or+5+EgYd5JNUxJXwe43pCcHRPC/NEvgMfTxZDY7F skRHHVs/nW8LFQHUJ2mPw6arXK99yMdFQviPgRpOOv1BpTSj8Oq3Oyu5pHfeQpFiCSybL9oI hi7rArdutQYjIZtN609zgfFrmZSd+lZ229lK0ifkwrg6su14ZVu7zlet/U9+sBaTK70Zb44T btWDDQnN2A6+sjmvgTdQAWM+3URTHwYngJHDAbZ4h76WIzxsjbhuepmxCaaJ8z2QqsqVjmk8 qxmVQXniCYDNz4+7WHXlsl9h79VrR69uxByxZPfbYeIP/R8Y6zdZ8sXS2pfUMhMSyxPDICyb 4oTAOUOJutYqpXxqkEUoBeiGQWgGeXiwSJIiH/s2q061vwsHAbf0gwmA9IOsmrboM/zOqcPT ++1yrLIwijEb/NM1zfw85XHchQ7of2WQL1/b9PcxE8yHAzKklues5bqPy+J1usTqWib6fJtW OKuhmMltQ18oiWiy9sxh4TKhY8bxV7J+ypkzIsxJ9C1SVB2b9C6HJVetiyWKYh7Tt0+T210t ig316MKtYK/cSUM1Z8pxAbfZuSaf4SU+B7vSeWcLDhiiH54dr+yhAy+/Vavx+HkS8W50khGo jBbntXRrHwByh7e58mdRvdg+EqqxCyB2BrJ6u5eJEA5ja/bK5k8zbEujpcTqkHDHjPumEXxk a+Wal0o+ui25OTjZbXrvpGSOYl6hA/xMqogmsuxD+c/PAYUQWSW9uuy27z98EHjQbVKiOE2k rPDv5zAOMsborS5DxVI3Yk98xq/DjGm38oEnXQfMV5JZAiLg5XqNlzBOvz0EPmyjle2nDt1y P3KJrjhDY/MLnjHnrfhZ7F960tExQQqy9Bf+5BUBa8bLPz1R0/+qtrYDgQkPAyz2ebnBs5w2 Z4aWWKVGKOWLb3dvUeO5u00O+aMfpMauC7hK/g54P7jlWI1lUcHfaa1xZsXdGy4HvN+LkWWf Hrsg9gAHX4SvgUkUOzllF2CXiBIZ3upUKI84Cw7BJihDYfZSYD+yICGiXO0A5xGI3hPFluMH GzAeIOZHfAWZ3TBDNVml2lQcr69SYJn8QyjshT2zKBpBubQ4GsUuMSwh5BO++TPmERqpnRPB MOH3jTVJ1w= IronPort-Data: A9a23:DPF4lqN/nA02+UrvrR0BlsFynXyQoLVcMsEvi/8bNHD9gXJmyH0aj jNbCjG2js36YmL1esQhNsirtQNC4cmL04U7HVE3sHRkSXNEpNHZQO6UKk7geiyTMojYQUl69 cQCe5zbIdwoT3nT4A+kLrPhxZUX/f/YG7P3AbadYXsqHAU7E354h0I7wrZm2NU0j9LnXFvVs I+rr8bSZQT0h2V/Pj1Nsvva80s056384m1Ct1U0PasjUDMy75UwJMt3yfaZdiamGOG4Z9KSR /rf1KrruSTW/gstF9njmbH+NUgFT7LXPA7JgXpbUKvnhxFEpyI/ybpTCBZnUqshttnzt4s3l L1wiKGNpScV0ozklu5FCEgGTix1Zv1I9bafKCbk7JWYnxLPLXfmnfg/VhgfMNxD8I6bI43vG d/0itwpRkre7w5j6OvjEoGAvux6cI+xetp3VkhIlVnxFewhTY3IX5LE7NpZ2CZYrs1VFJ4yX eJAAdZUREmGMkMn1ms/Uspkxr7x3yCnKVW0lXrMzUYJyzmLpOBO+OW1WDblUoTibdlYmE+eu lXH8wzRav3NHIXCodYt2ivEat7nxUsXaqpLfFGL3qICbGmo+4AmIEZ+uW1XABWOohXWt9p3c yT488e1xEQ43BTDotLVB3VUrJMY1/K1thU5/+ASsWmwJqToDwmxCUYUXjNhdt4fs95nXxA41 EGPs9+0Gmk62FGVYSr1Gra8gReeFAY7CE4nXXVYYDsupdjlvJs6yB7LVJBvHcZZjPWsQXepk 2zM9XNuwe9P5SII//zTEVTvpDSwpJWPahM44B7bWXirxg99fsipauRE7HCEvKkac9/BEjFtu lA8ifev1vEKE6ihr3OibuhXIaOs+7GsZWi0bVlHWsNJGy6W03G+fJAV+DhiL0dkKe4LfyKvZ 1Xc0T69/7dfOHenY6FyYoepUZgn3aOmFNL5TPmSYt5UJJR8HOOawBxTiYer9ziFuCARfWsXY P93re7E4a4mNJla IronPort-HdrOrdr: A9a23:dQICcKF1xZQUyGCJpLqE08eALOsnbusQ8zAXPhhKOH5om7+j5q WTdZUgpGbJYVkqOE3I9ersBEDiewKlyXcW2/hzAV7KZmCP0wGVxepZgrcKtgeAJ8SIzIBgPM lbH5SWQ+eAaWSSxfyKhzVQPexQpuW6zA== X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos; i="5.96,157,1665439200"; d="scan'208,223"; a="79727104" From: Thread-Topic: [PATCH] python-check-manifest: Relax git security settings in tests. Thread-Index: AQHY9gpIU9mxwR6SrEKVRLlEzDia2Q== Date: Fri, 11 Nov 2022 20:15:02 +0000 Message-ID: <87cz9txn7e.fsf@dlr.de> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Content-Type: multipart/mixed; boundary="_002_87cz9txn7efsfdlrde_" MIME-Version: 1.0 Received-SPF: pass client-ip=194.94.201.12; envelope-from=Ontje.Luensdorf@dlr.de; helo=mailin.dlr.de X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1668199868; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:list-id:list-help:list-unsubscribe:list-subscribe: list-post:dkim-signature; bh=LHE0w/2LhrUbw8AakO5nol7aW4ewxu9eHRx1hEtjXaE=; b=ogVWg8Z+I+4qrCGt5fYolCmxNH7rWBfFULmlHILiwD3kIALQ5Az5lI/mc/p2oJQI5uvTUh QAaSqu7eWBgJ+F+QoCWbqw9BOjlBwQcJF0WxOKFgPtfGpDPE4pFbAgd46hGEN6iJaT4WJE km4P/8GHha4nctIjjXCMjVUJek/buFuoX08k3nQic7kyoZ2L+gP1jWsTOaKAGbR58DW0Ph mKwR1VYyij9yii8rORCko+sXCDiLjReH3s3ANYEc2tF2pMPJLTzv1KOp8PwuU278DwT4/j zytvJjfGnnsak5Uv7T3xYCFfn3mPujj+MAMJma1u6joDCCCmA85aSrm8OC1v+w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1668199868; a=rsa-sha256; cv=none; b=OzFsZwLt2NcLVOViktjLZpufJbWgqg5XCKc/1UxDMUb1KKTRZrPERyK65jA9tly/gDUtl2 BS2y/7qUMv2190pVPlbFu5jJTw4lpKTmVzC6OC1iJw1VwNPNfmovpC4g6SqjOxvW/jENWQ a5cnA1au5nReFJB8jXiAPuL0Bqr2n7i3SIPAvGNpObK5KKNF1ZplhIViT/EjntHPi7LRyU UraqBvbkItacKEorNi3BFOFpVqpmuUDdTtW2P2GGKkaJZM6UXMd4B/VT1nLa5O58oNrJdf h/H36ERGlwh6SuD25R+eqx0X6sQfgn8smYdm3xixXD6MZc4SH7Znr48tJ6HtOw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dlr.de header.s=052022 header.b=wF84xXuy; dmarc=fail reason="SPF not aligned (relaxed)" header.from=dlr.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 6.07 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dlr.de header.s=052022 header.b=wF84xXuy; dmarc=fail reason="SPF not aligned (relaxed)" header.from=dlr.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: B3E401103A X-Spam-Score: 6.07 X-Migadu-Scanner: scn0.migadu.com X-TUID: Yw3RhypzqF/w --_002_87cz9txn7efsfdlrde_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Guix, the git security fixes for CVE-2022-39253 break submodule tests in python-check-manifest. This patch works around the issue by disabling the security check in the check phase. Best regards, Ontje --_002_87cz9txn7efsfdlrde_ Content-Type: text/x-patch; name="0001-gnu-python-check-manifest-Relax-git-security-setting.patch" Content-Description: 0001-gnu-python-check-manifest-Relax-git-security-setting.patch Content-Disposition: attachment; filename="0001-gnu-python-check-manifest-Relax-git-security-setting.patch"; size=1562; creation-date="Fri, 11 Nov 2022 20:15:02 GMT"; modification-date="Fri, 11 Nov 2022 20:15:02 GMT" Content-ID: <7E59135C782B7544A52C2F9F66594A08@dlr.de> Content-Transfer-Encoding: base64 RnJvbSAzZGUwZDMyNjk1NmZhNTUxYTNkYWQ2ZDY1ZjZmYWJkOWZmNDI4MmIzIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQ0KRnJvbTogPT9VVEYtOD9xP09udGplPTIwTD1DMz1CQ25zZG9yZj89IDxv bnRqZS5sdWVuc2RvcmZAZGxyLmRlPg0KRGF0ZTogRnJpLCAxMSBOb3YgMjAyMiAyMTowOToyMSAr MDEwMA0KU3ViamVjdDogW1BBVENIXSBnbnU6IHB5dGhvbi1jaGVjay1tYW5pZmVzdDogUmVsYXgg Z2l0IHNlY3VyaXR5IHNldHRpbmdzIGluDQogdGVzdHMuDQoNCiogZ251L3BhY2thZ2VzL3B5dGhv bi14eXouc2NtIChweXRob24tY2hlY2stbWFuaWZlc3QpW2FyZ3VtZW50c106DQogIEFsbG93IGdp dCBzdWJtb2R1bGUgY29tbWFuZHMgdmlhIGZpbGUgcHJvdG9jb2wgZHVyaW5nIHRlc3RpbmcuDQot LS0NCiBnbnUvcGFja2FnZXMvcHl0aG9uLXh5ei5zY20gfCAxMSArKysrKysrKysrKw0KIDEgZmls ZSBjaGFuZ2VkLCAxMSBpbnNlcnRpb25zKCspDQoNCmRpZmYgLS1naXQgYS9nbnUvcGFja2FnZXMv cHl0aG9uLXh5ei5zY20gYi9nbnUvcGFja2FnZXMvcHl0aG9uLXh5ei5zY20NCmluZGV4IGUyNjY1 NmZhMzIuLjg1N2U0ZmMyMDcgMTAwNjQ0DQotLS0gYS9nbnUvcGFja2FnZXMvcHl0aG9uLXh5ei5z Y20NCisrKyBiL2dudS9wYWNrYWdlcy9weXRob24teHl6LnNjbQ0KQEAgLTI1NTgwLDYgKzI1NTgw LDE3IEBAIChkZWZpbmUtcHVibGljIHB5dGhvbi1jaGVjay1tYW5pZmVzdA0KICAgICAoYnVpbGQt c3lzdGVtIHB5dGhvbi1idWlsZC1zeXN0ZW0pDQogICAgIChuYXRpdmUtaW5wdXRzDQogICAgICAo bGlzdCBweXRob24tbW9jayBnaXQpKQ0KKyAgICAoYXJndW1lbnRzDQorICAgICBgKCM6cGhhc2Vz DQorICAgICAgIChtb2RpZnktcGhhc2VzICVzdGFuZGFyZC1waGFzZXMNCisgICAgICAgICA7OyBU ZXN0cyB1c2UgZ2l0IHN1Ym1vZHVsZSBjb21tYW5kcyBvdmVyIHRoZSBmaWxlIHRyYW5zcG9ydCwg d2hpY2gNCisgICAgICAgICA7OyBoYXMgYmVlbiBkaXNhYmxlZCBpbiBnaXQsIHNlZSBDVkUtMjAy Mi0zOTI1My4gRW5hYmxlIHRoZXNlDQorICAgICAgICAgOzsgY29tbWFuZHMgdG8gYWxsb3cgY2hl Y2tzIHRvIHN1Y2NlZWQuDQorICAgICAgICAgKGFkZC1iZWZvcmUgJ2NoZWNrICdhbGxvdy1naXQt c3VibW9kdWxlLWFkZA0KKyAgICAgICAgICAgKGxhbWJkYSBfDQorICAgICAgICAgICAgIChzZXRl bnYgIkhPTUUiICIvdG1wIikNCisgICAgICAgICAgICAgKGludm9rZSAiZ2l0IiAiY29uZmlnIiAi LS1nbG9iYWwiDQorICAgICAgICAgICAgICAgICAgICAgInByb3RvY29sLmZpbGUuYWxsb3ciICJh bHdheXMiKSkpKSkpDQogICAgIChob21lLXBhZ2UgImh0dHBzOi8vZ2l0aHViLmNvbS9tZ2VkbWlu L2NoZWNrLW1hbmlmZXN0IikNCiAgICAgKHN5bm9wc2lzICJDaGVjayBNQU5JRkVTVC5pbiBpbiBh IFB5dGhvbiBzb3VyY2UgcGFja2FnZSBmb3IgY29tcGxldGVuZXNzIikNCiAgICAgKGRlc2NyaXB0 aW9uICJQeXRob24gcGFja2FnZSBjYW4gaW5jbHVkZSBhIE1BTklGRVNULmluIGZpbGUgdG8gaGVs cCB3aXRoDQotLSANCjIuMzguMQ0KDQo= --_002_87cz9txn7efsfdlrde_--