From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id IBs5LOmC8GE7+wAAgWs5BA (envelope-from ) for ; Wed, 26 Jan 2022 00:08:25 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 4ESnKemC8GF/NwAA9RJhRA (envelope-from ) for ; Wed, 26 Jan 2022 00:08:25 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2F3E411177 for ; Wed, 26 Jan 2022 00:08:25 +0100 (CET) Received: from localhost ([::1]:49134 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nCUvE-0005gI-3e for larch@yhetil.org; Tue, 25 Jan 2022 18:08:20 -0500 Received: from eggs.gnu.org ([209.51.188.92]:58084) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nCUuz-0005g8-D5 for guix-patches@gnu.org; Tue, 25 Jan 2022 18:08:05 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:57573) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nCUuw-0005P9-Fc for guix-patches@gnu.org; Tue, 25 Jan 2022 18:08:05 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nCUuw-0005a4-Bl for guix-patches@gnu.org; Tue, 25 Jan 2022 18:08:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#53461] [kiasoc5@tutanota.com: Rust CVE] Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 25 Jan 2022 23:08:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 53461 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: Leo Famulari Cc: 53461@debbugs.gnu.org Received: via spool by 53461-submit@debbugs.gnu.org id=B53461.164315202721378 (code B ref 53461); Tue, 25 Jan 2022 23:08:02 +0000 Received: (at 53461) by debbugs.gnu.org; 25 Jan 2022 23:07:07 +0000 Received: from localhost ([127.0.0.1]:50476 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nCUu3-0005Yk-9j for submit@debbugs.gnu.org; Tue, 25 Jan 2022 18:07:07 -0500 Received: from mail-qt1-f169.google.com ([209.85.160.169]:34375) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nCUtz-0005Y6-IC for 53461@debbugs.gnu.org; Tue, 25 Jan 2022 18:07:06 -0500 Received: by mail-qt1-f169.google.com with SMTP id c15so12865819qtv.1 for <53461@debbugs.gnu.org>; Tue, 25 Jan 2022 15:07:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=xcxSUcd9AwHZTnEyUR0eQD61MAvk4/kEoy87qWcQLwQ=; b=FPi6kU41XoPrwf49QukHMM1PHqdqApVlxdYWXsUpoB3qIR4lAuxxG4vpgbkrqiCGBk +E2np5+fX3sMiPYWPVe3jrqh0bwWDCc1uoShJC9p1bb8PVok1VEF2bLr0RVY90NeQhTL NdgDv7b6cxLDGWcyXEetgB2buW9q12fUZKYDnnKVN7nBgte+8pyk3dPHpal7fmt+RM4K ED9HV6Z7Ew7T3zSFJaI5LseOt6Y38Qa11P23DjtnkX/FZUqZHGZpMF1abBy09qDHTrOJ YDURyu0XjEunrfaveEvjhWEzOnuJn+OmQVajtIOG8tSZTXC7gpSoEE5/bjEwwY5IJej9 3v4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=xcxSUcd9AwHZTnEyUR0eQD61MAvk4/kEoy87qWcQLwQ=; b=GC1rtQK7+O/Y62wW4CspBRtk5nxOkmehbF68NLssc3G33ap0OpPBqAFzEiw/z6gekA VYicFDGfdn78biTyCDlXtjslSnwRumdqZwqXQ/pi/aUgErxWy0Cx5AVmSP+wdVcOBFjD aS74EPj9KSp0F5InlDgzDzSXGZtDkh7jb5Nwm+w/uDVxCt6bd4fI/BtvJ7OH8FLVAnov SnakQKPYQ9j4YK9eSl335PzUv2vbxa0FVQksQKkcCN94VKsCMtgtX5U3launAQJZ5nJK EwdSaxltFRTS4xIdukKuRulT+iCC8cTPLs+nVf8I6kcO0Ks5Z0fXRrttph5DqxUe5XMR zN3Q== X-Gm-Message-State: AOAM533ciWMUaSE9CJW5J6vMO1WlzaFDEL7V40VC7KJpL3TzFBvvlOqK 0bLOSQvs0Qsf1JV5QpEZEY6ZecTy4hU= X-Google-Smtp-Source: ABdhPJwRdabi7FSxU1FYtkH1X+jGC8d7XzPUOPJ4LmdRs2yEbCgaodV4mXzjqrBYpb6AzK67kZB7YQ== X-Received: by 2002:a05:622a:1a9e:: with SMTP id s30mr18905969qtc.119.1643152016337; Tue, 25 Jan 2022 15:06:56 -0800 (PST) Received: from hurd (dsl-10-136-58.b2b2c.ca. [72.10.136.58]) by smtp.gmail.com with ESMTPSA id bp35sm9882719qkb.72.2022.01.25.15.06.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 25 Jan 2022 15:06:55 -0800 (PST) From: Maxim Cournoyer References: <87ilub6s7z.fsf@gmail.com> <87ee4w6csy.fsf@gmail.com> Date: Tue, 25 Jan 2022 18:06:55 -0500 In-Reply-To: (Leo Famulari's message of "Mon, 24 Jan 2022 23:30:59 -0500") Message-ID: <87ee4v4dps.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1643152105; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=xcxSUcd9AwHZTnEyUR0eQD61MAvk4/kEoy87qWcQLwQ=; b=rRwHx+Us9hcUNf8SlC1cVZFv2XumNJsuFvtixYYN9F11nJbF9Zzp1ZDz/wDaiFdm7cB1ys CXq3+kpoH217JOW2WEYmkeOwBHyJ1bLw7db23m53MdBCVcYkxc8pNQ/eomr7fDpVzmjXnP f9u+Dk3m3uI0v9VWHOHP6jpLXgkb7schWGIa8Uou8SeTxPablSm5k+w2/lnJRFTx5e7ZBX cl3jBo8uvR2a3cjv4WyLsMUjXMiZURgKs4crC6hc6Gb5NNHgDS8F8w34NekFlo404r2vtv GDTStNpFK2dmx7gombQUOzorzRSjFzwnVYB/wIceo0LIJF+R1EIq5EbzEPusRA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1643152105; a=rsa-sha256; cv=none; b=tn57eTZltIxn4tiPHiqUQKA2aovyzVqHyYVDvEjutVeTd13JV/XozshG5RDMLUWcD4be+i QAoMGBNfOBpIHJpuBorT0oDRuvVQcEAMNblEHxhmP1rUvwbZMK6FV58smIsYl7BJrrZ+bi 4J90SQitKabeU6mLTZ8tSuv5ByEX/OE7XPoVvFePI0F0TOLHgxFf8CRXmz8G22g1nfFP9f W33iVb5W7nllPvzzNjl3t4cfErdHyohRZMZvi0wt6IAiLs5r4xGP1xMgGi0Kvd3+ICgUD4 jraIqbV+ZuKHLgOMjwLtYIC8Y4zs6lR2WxnkBM31/tSNAvMxxI5I7W+E4VUi8w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=FPi6kU41; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.03 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=FPi6kU41; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 2F3E411177 X-Spam-Score: -2.03 X-Migadu-Scanner: scn1.migadu.com X-TUID: 1tTqi4PQti92 Hello, Leo Famulari writes: > On Mon, Jan 24, 2022 at 04:31:25PM -0500, Maxim Cournoyer wrote: >> OK! I just asked in #rust and they confirmed what I thought (all crates >> -- well the ones using 'std::fs::remove_dir_all' but we can't easily >> know) needs to be rebuilt if we are to patch that CVE. > > Okay. Let's see... > > ------ > $ git grep cargo-build-system gnu/packages | wc -l > 2152 > ------ > > I suppose we could do it quickly on a branch. Note that Rust is now needed to build all of GTK, at least on x86_64. That's a rather large rebuild. Maxim