From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id AFtFLY5i82NHMgEAbAwnHQ (envelope-from ) for ; Mon, 20 Feb 2023 13:07:42 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id eBg4LY5i82P0fQEAauVa8A (envelope-from ) for ; Mon, 20 Feb 2023 13:07:42 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78C063FA1C for ; Mon, 20 Feb 2023 13:07:42 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=bJFjmdAA; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1676894862; a=rsa-sha256; cv=none; b=ZBrJKC3yHqnpsyLtpPqM5sGrkNPfaQFAEuZGVMTxDZmKPQ6U+HwSEdxiErQhFEakKqdnoH GRObB5kRunYvavHEazpGZud5SLzIV4H+qvZM4Vx+iA1tlLNKW0CLmOIf/DhQ5oAFEZmvtu iUAMkLh2IDeGzCTt9/iK2zLNHlJfsguy1EyZFDLW5rxzaa0XiMzQMIvZ7D+GJltLljf2p9 vXjGKMHvCCMNhbkBPvwXelQEylsGVGAgEzH2oH/Y1tbChZGKtqVY7uCPG6KRgFgw8BcvPl u/tbqDlshTbA03J4s4NvffeCt9lgHz4dm3E4kbaywr7Q7RHk8Y9B/R1shBzcyA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=bJFjmdAA; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1676894862; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=d239PAm6f+msN6hlRaDFIph3UqRs0w728ALGwpWmHvo=; b=YOHPCHBWexnRizfC1AfbcNLA9bTdVELIKMnCJIgYh9PCF/+6JK/UKczYBklRNuxYyPSvf2 ArjRROnWcdKvdCM2zoKPBx3we6LluArl9y4aWM2kco+6FLmiyC1cDB4eqfsfb8YfFQvq2o lI7Rm6/puSsmlAQvHPkOlRNEZ0TuJpU6peQ+EywCK383BqNiqAvw+UpwTP3tXumHTqHxT9 lRxwnSo4TI85u4Bq15M2Gmn4r5sCn6JLPfJCkQc1N4VzMebAcsOU/xcz3TnsWI4AeFwRKe wjdzvdE0fAIVFTMu9KCeO1c0Pj7wVcQwUmYfAioXexmAnAeiOj5qGAEzKRlv9Q== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pU4bR-0008Oa-Id; Mon, 20 Feb 2023 06:45:05 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pU4bP-0008Nw-Bp for guix-patches@gnu.org; Mon, 20 Feb 2023 06:45:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pU4bP-0003tw-1u for guix-patches@gnu.org; Mon, 20 Feb 2023 06:45:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pU4bO-0005vN-Tm for guix-patches@gnu.org; Mon, 20 Feb 2023 06:45:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#61583] [PATCH] gnu: git: Update to 2.39.2 [fixes CVE-2023-22490 & CVE-2023-23946]. Resent-From: Simon Tournier Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 20 Feb 2023 11:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 61583 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Greg Hogan , 61583@debbugs.gnu.org Cc: Greg Hogan Received: via spool by 61583-submit@debbugs.gnu.org id=B61583.167689348222712 (code B ref 61583); Mon, 20 Feb 2023 11:45:02 +0000 Received: (at 61583) by debbugs.gnu.org; 20 Feb 2023 11:44:42 +0000 Received: from localhost ([127.0.0.1]:50704 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pU4b4-0005uF-15 for submit@debbugs.gnu.org; Mon, 20 Feb 2023 06:44:42 -0500 Received: from mail-wr1-f44.google.com ([209.85.221.44]:41937) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pU4b2-0005tx-0d for 61583@debbugs.gnu.org; Mon, 20 Feb 2023 06:44:40 -0500 Received: by mail-wr1-f44.google.com with SMTP id z8so563574wrm.8 for <61583@debbugs.gnu.org>; Mon, 20 Feb 2023 03:44:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1676893474; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=d239PAm6f+msN6hlRaDFIph3UqRs0w728ALGwpWmHvo=; b=bJFjmdAAwjwAh0bty0b8qFswNjVj41+y16anncnZKeZTH1wi9K7e32o9WN155LFAYG yoS36VrZhsOqR2ed9Is1G8jANEP1RLRAOA38r57r01P2I9HbB2vIPtJKCwEP0AcvIqiC 0id2jZ3zZT8mLk48EVN7yVTRkJgdPS1Tz8D1TTBh14xMHZ2g8hhlvAdTJmYRT5CwhTfo /LSydx3khpqPp97M3H2TgAe0C2/DX4Iiju6VeJT7J86MZsFCym05KhVye6N62gG0SLcH 0ZmzhVmHAGGEe5gdSXaJOi1nU/LAzm4uEzUS1m2acbgGdqHjIkz4kJWoj7B8Y0aldPzk rdhA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1676893474; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=d239PAm6f+msN6hlRaDFIph3UqRs0w728ALGwpWmHvo=; b=dcy8mFvILonKTPMzr+PdK40tITYLgQznzkLzFn3ceeGnOMul+NqdQhXd8b2Ib9j823 swvKjqVtY4Z/vG3xJazTMw4ikrUHTbSqF4B/dbCZuV1NV+uxTPUEptPAxOj/CnAvFtPW 86qLIwE7e2vsfAQnGHjbbkMkNe+/3Ma/BWqfou3xDLeGj9DZi9Wrn1L19EMWbwtbVf0O oCIUGxy90/TG/T4HTiz2C9w+yRP4SvZckjC09pCE8apecdgZExeKNZ54csJ5zB1m6xX7 aC/G+i7x8m/tSHk/pAdSjxwDVLBCifxKO8iM6myqJHVn5nPrFNspbWSV73/rCiPhUFpm 0XyQ== X-Gm-Message-State: AO0yUKUofO3iGHDROMIR7ca3b3UQCfQGw51HKV+tIgOguWSOZ01BIW0Y 0kwS6RRuUwPXIv9/1GvKGSu5y8M7nl4= X-Google-Smtp-Source: AK7set/kGwfF81kVhQ2PC4UCqxGPlNhDQWw6SVGZ0FvW/AOo4v1mzuduLqGZhvG1yBbWcEX/9gaEJQ== X-Received: by 2002:a5d:6392:0:b0:2c5:944d:44d with SMTP id p18-20020a5d6392000000b002c5944d044dmr780547wru.2.1676893474013; Mon, 20 Feb 2023 03:44:34 -0800 (PST) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id x15-20020adff64f000000b002c406b357cfsm2150344wrp.86.2023.02.20.03.44.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 Feb 2023 03:44:33 -0800 (PST) From: Simon Tournier In-Reply-To: <20230217180402.29401-1-code@greghogan.com> References: <20230217180402.29401-1-code@greghogan.com> Date: Mon, 20 Feb 2023 12:44:23 +0100 Message-ID: <87y1os36js.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: X-Migadu-Queue-Id: 78C063FA1C X-Spam-Score: -2.85 X-Migadu-Spam-Score: -2.85 X-Migadu-Scanner: scn0.migadu.com List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-TUID: OZfR74keeMeM Hi, On ven., 17 f=C3=A9vr. 2023 at 18:04, Greg Hogan wrote: > * gnu/packages/version-control.scm (git): Update to 2.39.2. As noticed previously for an update of Git, this implies a lot of rebuilds because git-minimal inherits from git. Well, I am checking if git-minimal is used only for the tests by some of the packages. For sure, it is a concern since it is a security fixes. Cheers, simon