From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id SCxKAGfrSWDRZwAA0tVLHw (envelope-from ) for ; Thu, 11 Mar 2021 10:05:27 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id sG2MN2brSWB9SQAAbx9fmQ (envelope-from ) for ; Thu, 11 Mar 2021 10:05:26 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 77D8F1E27A for ; Thu, 11 Mar 2021 11:05:26 +0100 (CET) Received: from localhost ([::1]:43370 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lKIC5-000569-JJ for larch@yhetil.org; Thu, 11 Mar 2021 05:05:25 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:37104) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lKIBk-00053f-No for guix-patches@gnu.org; Thu, 11 Mar 2021 05:05:06 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41073) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lKIBj-00046P-9d for guix-patches@gnu.org; Thu, 11 Mar 2021 05:05:04 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lKIBh-0006QS-WA for guix-patches@gnu.org; Thu, 11 Mar 2021 05:05:02 -0500 Subject: bug#47037: [PATCH] gnu: emacs-password-store: 2.1.4-1.918992c [security fix]. Resent-From: Pierre Langlois Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Thu, 11 Mar 2021 10:05:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 47037 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 47037-done@debbugs.gnu.org Cc: Pierre Langlois Mail-Followup-To: 47037@debbugs.gnu.org, pierre.langlois@gmx.com, pierre.langlois@gmx.com Received: via spool by 47037-done@debbugs.gnu.org id=D47037.161545708424656 (code D ref 47037); Thu, 11 Mar 2021 10:05:01 +0000 Received: (at 47037-done) by debbugs.gnu.org; 11 Mar 2021 10:04:44 +0000 Received: from localhost ([127.0.0.1]:52617 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKIBP-0006Pb-NV for submit@debbugs.gnu.org; Thu, 11 Mar 2021 05:04:43 -0500 Received: from mout.gmx.net ([212.227.15.19]:60067) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKIBN-0006PP-8t for 47037-done@debbugs.gnu.org; Thu, 11 Mar 2021 05:04:41 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1615457074; bh=LKz+MDc3r/C+TCTjwRxMYEZS2QhZC7z1Sn4sF+QFU8k=; h=X-UI-Sender-Class:References:From:To:Cc:Subject:In-reply-to:Date; b=BBlw/6IYN8OaYDdC+nEgwva2Io8TALKfDzzSAbBMjOM9MM5j9+BfMhMWUmz07dZ2q QIXkeGsB7+YdEGA49nQgKOJJHpMof4+hSesYouENcqYtSUxWsB59E7aNg6w0Py2hcq FrO6iRk+FoPyqFrQs0t+vfDzVlbmZU97HOVQaH6k= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from labiere ([82.69.64.142]) by mail.gmx.net (mrgmx005 [212.227.17.184]) with ESMTPSA (Nemesis) id 1MOiDd-1l6D2T1TjD-00QFvj; Thu, 11 Mar 2021 11:04:34 +0100 References: <87y2ev5pin.fsf@gmx.com> User-agent: mu4e 1.4.15; emacs 27.1 From: Pierre Langlois In-reply-to: <87y2ev5pin.fsf@gmx.com> Date: Thu, 11 Mar 2021 10:04:32 +0000 Message-ID: <87o8fq57m7.fsf@gmx.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Provags-ID: V03:K1:899BwW2y8vY6mBySDNaK5ueRTIq9XA+nt5l6uWYczT/jp8BVr+V OQze8/l5C2+p0BIE9mwSrvcsoZNtfGKkdwK/H/ASGKm7tHQYEw+UotLqol3Dq96GFaCfkhi hMvfbxSvOm6VWmtGeNsZqM3Lc2VofAVZzoLbg4/1qfzLRqrpGxNWbhanNKMQ+SUlA8sWOax R6FFj6UA1CLUgUa5mgqhw== X-UI-Out-Filterresults: notjunk:1;V03:K0:ZxF4MC13uEw=:pieLFB9sY8gduWibwzZJKd ICUyo2wMsYWyzGxc+W3M6tcfXVe6gnLJEEmQwJ4WVZTZMdXrz/aMM/ET/BJbMzzY05VV18KRh hk971VEGVfNtzvH447dxiRJnKB/OTZYuniJdkGRu6WnlhMlspM8W+2amsB6HmbdKoD4d2VZmL emzqYPVOKB7OMkR9AI6UnRZQiwnWOdwx2xRLmAsWhNxgHK5Xigb4u0Eb3KsAx73psZKprczPw GyXNeqc0Rgvd3jH/SqRYLFoOMdoVA9d7VNwK1Vkg7pLVd2AWYGUmabcp1aqsvKm0YGVvRLkQY IV/pl27Aaxwod3DTQA+UfmLKAN+4QnRHC8uufq7dm531CWmHx/IF/sFwzUs9zanAPVWBjqoRS Xp7+mfrQlKXTovQQyU25U0jw2j1UfjwJwgUOPgye3sdWbaMk8QhPSjOU4IVvjy8BRXDaHnEap CSyEZPNuJHfDaQsQSXLwPbCqpucxjykQKmggCaQWAzxRsNCS50L5K7baSlWLnxRtTbQaQ/kBN GhmGE5j6JuCQOu54E5eKV81gAZHhRgUwPqiEYGzDzj21LZq5rEB/530vDqBGVFJnqbgdjnf1B aMPfsZuVs3USql9ckwufPRZ70KZaIUl/7MC/cbTMZXBr72N9ejEnC3LqjNQ/Ydi+6kb8EmMcv nEyRSQHKgA/dBb3PKxBp0IUkTyBkN6pikD3sUWpAAeFB6MEPKo+jDjd/jT2/Q8okoDcAzY78K MLkj3Gu+7biZY85OIT7AfSuGar00oQeYPzxM7z3lHAEcFVerGmW1wamcfu9fXOCw/elQ9ptgm 1PwtMD9dEEHJjccCsH0MjzdLA1LavCsWvLeOvwa4ros1q3NLORF+Qu+sDx8gDLTmF+sl0XzxP XYoGoK/6Ku2xFDWnFuSQ== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1615457126; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=LKz+MDc3r/C+TCTjwRxMYEZS2QhZC7z1Sn4sF+QFU8k=; b=qSjcB0IkIskKakYe7gMr3toyL8HojbOdBzLE/yXqXPbMBnPzdAIPrzl3txTonKeJd1IBxc oGKpcp19YgR+dYZ09cKAbPe3M2oaSDIgUkIczpd2aXImh0nUiXrhRoob8RV8FsuNmIlXqN 1hX+JaOZQebe8pCwUHSiPyC4l6Zr8HQc1NFFPcmP8NrCshezES2/FxhXG97MASINDZ1Ks5 lzgtCwNVjY761Rfwm65ay7uEMbJdNZuXhAtpZ0204ho2GpxLyRTuo075Y7NKncaUs8SCZ9 ar/5Ec8oEkQDcfueX4k49B40KSVL87Y5PP5ji5efGygtKPK5ZBUaw7BXad4JRA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1615457126; a=rsa-sha256; cv=none; b=G8vaX4s4lC0EVKcoemNuSS19Y2HSetVnY0vNoZNLaxF7OWHS4PginWXlEunoajGxOEMp7h TpIXVUHpgoIR0kzQBVs9rEGkPZYZu82Vt+hWq7imjKcMsN7qikp2u/bXlLB8Dv13zWJNLk rpLj5uQt8w6HUGnsD0N0pFHg/TY0XKUH6WInbfbA+6j2c4AU7NMD6PReNUNIatZp/GwzwW dkXmM9w/U3tFzi4kvFu7YothzU06nz5Gn8eSGPqQ+YGc96CpLj3M0LJ+FzVUlsz+ex4osE sWWPJ9EPocbg4bG/5pTyHVgMpBsedkIKjWzwUMdycqvqkbznzLhHjfP5rPHNgA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmx.net header.s=badeba3b8450 header.b="BBlw/6IY"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmx.com (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -3.39 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmx.net header.s=badeba3b8450 header.b="BBlw/6IY"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmx.com (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 77D8F1E27A X-Spam-Score: -3.39 X-Migadu-Scanner: scn0.migadu.com X-TUID: vXmxFDEJgZrL --=-=-= Content-Type: text/plain Hi Guix! Pierre Langlois writes: > Hi guix! > > I noticed the update to the password-store yesterday and so got curious > what changes we had and took a look at the git repository. I was really > happy to find the emacs package includes a fix [0] for a bug I've been > experiencing for a long time, where using pass inside EXWM would > deadlock emacs. > > Taking a closer look as well, the commit also fixes a potentially quite > critical security issue with the package, I think we better apply it :-/. > > Is this OK to commit? I've tested this locally on EXWM via ivy-pass. I figured this patch is just a straight-forward update, and quite an important one, so I've just gone ahead and pushed it, adding an extra comment that the emacs package version doesn't match the password-store program version. I figured maintainer's time are better spend not reviewing trivial patches too much unless it's for onboarding newcomers :-). Please shout if there are any issues! Thanks, Pierre --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFMBAEBCgA2FiEEctU9gYy29KFyWDdMqPyeRH9PfVQFAmBJ6zAYHHBpZXJyZS5s YW5nbG9pc0BnbXguY29tAAoJEKj8nkR/T31UBuQH/2K5YwL+IsFhyYC5S3bpXM2Z vG6j2aMYPs4+dC2gmC1hlo4wLXapd4CxOKo+y9NCvvbo4W/O2Vp1ZDoukNAXPllX mMeQMVmMT65FgXFPBrfdmgeG3R4l0I44iO/rBYXzQk6XC7+cim7Jr36k4HPuUvtc fKmxrABfZs4CI3ufBaBzS9P6Hm+JNHVVWMC3YrsLaUkmY7jzQ1/AX8Dp+AOaNCma 4trh/wFG4paD27ZAm7irrZOO7nSzFKcDBwmXyO+QTbB1/rZhoWTR7lQjt/i/UJ21 3vFCEYNU8dLKILWDLdyp/VWEsobrkaYr5WHb2tSaZmMLJFAvbTBY313ODhcUhIc= =FJNd -----END PGP SIGNATURE----- --=-=-=--