From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 2CqjNuScYWGhCQEAgWs5BA (envelope-from ) for ; Sat, 09 Oct 2021 15:45:08 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id YO9lMeScYWHFJwAA1q6Kng (envelope-from ) for ; Sat, 09 Oct 2021 13:45:08 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 60FB4D80E for ; Sat, 9 Oct 2021 15:45:08 +0200 (CEST) Received: from localhost ([::1]:44132 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mZCex-0001X4-3h for larch@yhetil.org; Sat, 09 Oct 2021 09:45:07 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34816) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mZCes-0001We-FQ for guix-patches@gnu.org; Sat, 09 Oct 2021 09:45:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:40960) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mZCes-0001zM-5Z for guix-patches@gnu.org; Sat, 09 Oct 2021 09:45:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mZCes-0005oi-1y for guix-patches@gnu.org; Sat, 09 Oct 2021 09:45:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#50814] [PATCH] guix: git-authenticate: Also authenticate the channel intro commit. Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 09 Oct 2021 13:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50814 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Famulari Cc: 50814@debbugs.gnu.org, Attila Lendvai , guix-security@gnu.org Received: via spool by 50814-submit@debbugs.gnu.org id=B50814.163378709722335 (code B ref 50814); Sat, 09 Oct 2021 13:45:02 +0000 Received: (at 50814) by debbugs.gnu.org; 9 Oct 2021 13:44:57 +0000 Received: from localhost ([127.0.0.1]:52506 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mZCem-0005oA-Ue for submit@debbugs.gnu.org; Sat, 09 Oct 2021 09:44:57 -0400 Received: from eggs.gnu.org ([209.51.188.92]:32882) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mZCek-0005nx-D5 for 50814@debbugs.gnu.org; Sat, 09 Oct 2021 09:44:55 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:55092) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mZCee-0001TQ-W8; Sat, 09 Oct 2021 09:44:49 -0400 Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201]:59222 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mZCeY-0007KN-Bn; Sat, 09 Oct 2021 09:44:48 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <20210926101928.3877-1-attila@lendvai.name> Date: Sat, 09 Oct 2021 15:44:40 +0200 In-Reply-To: (Leo Famulari's message of "Sun, 26 Sep 2021 14:02:13 -0400") Message-ID: <87k0imxqgn.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1633787108; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=C5517x/viB9fJ4fCPGsTHdX5wbxCchyoV1jbbH4TfkE=; b=gJaT8tZ5tNmmK+hvIpZ8TtYI7SDCc5cghiOSCs2bi2VQC/iAvTh8r/xtcfPaFqT79mwCYM QECIAs3ScZ2io8ZC1hpGDIblb8gsiAOoqWoQGgv2B4kqxtVgoLdpQEWTyRQ8nz8yGJjuq2 W/UjIxEZX7lEDv6s0pFwYvGRy5ruCx2mVygB+2MJhnY1SnF5hraKZU/tG3c53gTDGuwDE9 yXd1YiyThQziNk6RddX0qdTToyZ8PCeLC5sNix+KuapwabTtwpXMiRRZF4EuauBxMrZs7w mybN03cnLFk8gJRkN6UFlkgd+mEP7Um7okfihTCD7XFaoQEcsWLcOaRYKNTQuQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1633787108; a=rsa-sha256; cv=none; b=kvzAuYVfCEAlEojRP8HZ+wU28nUSZ+vpC+tDKKtN1L5bteeYFxtloKHTkw79zKp5qaQg/A OSGjum+4MB82PZ/y84/qvkwdCkD+IkE6GxIFzNUyvBNR8Mh884L4Oz5zYrU17A/4h06NJ7 qxd6v8kPYl6qbZH0yGcXe4cFD5I2l1Bn3wZDHPm13JL1OW82zDdhJkNjCSmJRwHvm3wY7i 8HyRJVK0fKVpLMWKJQQ0quTbTbscdUrFLkCbZxa0dtZTd/L4R90IHCnaSEZeYMi1hZRVQ8 olgYysqg5sJymLa/Ov5C0enrQleAJZf1NuDE+R9err/zN1D2YVGWCL7c+AwgbQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -2.91 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 60FB4D80E X-Spam-Score: -2.91 X-Migadu-Scanner: scn0.migadu.com X-TUID: in4yY8ObdSMi Hi! Leo Famulari skribis: > I've marked the severity as "grave", which in Debbugs parlance means > "makes the package in question unusable or mostly so, or causes data > loss, or introduces a security hole allowing access to the accounts of > users who use the package." This had the unfortunate effect that this patch would not show up in Emacs debbugs.el, which, for some reason, doesn=E2=80=99t know about =E2=80= =9Cgrave=E2=80=9D. I=E2=80=99ve changed to =E2=80=9Cimportant=E2=80=9D and I=E2=80=99d suggest= not going beyond =E2=80=9Cserious=E2=80=9D, which is already grave enough. :-) Ludo=E2=80=99.