From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id qLFLFO3/l2CiGAAAgWs5BA (envelope-from ) for ; Sun, 09 May 2021 17:29:49 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id kPDxD+3/l2B7NQAAB5/wlQ (envelope-from ) for ; Sun, 09 May 2021 15:29:49 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 07C331A4AD for ; Sun, 9 May 2021 17:29:49 +0200 (CEST) Received: from localhost ([::1]:33032 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lflNL-0006N9-Qh for larch@yhetil.org; Sun, 09 May 2021 11:29:47 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45064) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lflHm-0004dY-Tz for guix-patches@gnu.org; Sun, 09 May 2021 11:24:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:44300) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lflHm-0001Bp-Ll for guix-patches@gnu.org; Sun, 09 May 2021 11:24:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lflHm-0000gd-HC for guix-patches@gnu.org; Sun, 09 May 2021 11:24:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#48304] [PATCH] gnu: expat: Update via graft. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 09 May 2021 15:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 48304 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Leo Prikler Cc: 48304@debbugs.gnu.org, Maxime Devos Received: via spool by 48304-submit@debbugs.gnu.org id=B48304.16205737852612 (code B ref 48304); Sun, 09 May 2021 15:24:02 +0000 Received: (at 48304) by debbugs.gnu.org; 9 May 2021 15:23:05 +0000 Received: from localhost ([127.0.0.1]:55843 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lflGr-0000g4-Hj for submit@debbugs.gnu.org; Sun, 09 May 2021 11:23:05 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:42865) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lflGo-0000fS-Ji for 48304@debbugs.gnu.org; Sun, 09 May 2021 11:23:03 -0400 Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 86AB55C0045; Sun, 9 May 2021 11:22:57 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute1.internal (MEProxy); Sun, 09 May 2021 11:22:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=0bUFgFjc6m4hjCQ02ItDECsS rgPd0MOS+gdROA2ZWKI=; b=pUmlPYm2xAl6cQ5PSRlvlkFU/2261yxOUbrhBsCs aKUHfJcmNOEDp0TnY2tRGcckiFOBGFFkb2C5JUolqeulBnGcjZL6piJcRyKL9Htf pcCpNpClkUexemdiK5epGwGWP1pusuny6aKwoop8EmqbkG2DyWVSpmktF97g0lck XPs= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=0bUFgF jc6m4hjCQ02ItDECsSrgPd0MOS+gdROA2ZWKI=; b=KOcFpBU/urC+I9oG+kFGMv omrr7J+w5L4iLzkolCMutYYwaRKHoA1n/m5+gnXw007krXvr8+DPVfPMZAAYIrWt Ozyv2XmV6UsiJjIdA0CGgDwUD+nnxLOUKMgWEuqRUrKUgC5c4KxUnLXBJknbRAAU xrrJWN2ZxeitkVtItcndHoZQUjiRHJidZyswoLs9j+mOu892JMXZT2QdcFXAuRES JBX7XGJodRfHFbilmnpUi4xHKb1U/BY0WQxpIX1y/tixvYw36ec+0pflX6W6Bcnk AJJEDxa8e7biO9EDF+sVU8z8qebPx2QstqVqAWOIJ1PBEqvmjLTHeiopy15aYUbg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdegiedgledtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth gvrhhnpeeukeektdffvddtudegjeegtdevhfeufeeivdejiedtieegtdevjedvjeehffev gfenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 9 May 2021 11:22:56 -0400 (EDT) Date: Sun, 9 May 2021 11:22:54 -0400 From: Leo Famulari Message-ID: References: <20210508232729.11557-1-leo.prikler@student.tugraz.at> <829778414d37d154393f014d52c17e58b72aa1ac.camel@telenet.be> <276aa14b795b9046b326e5bc0235049a5710c765.camel@student.tugraz.at> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <276aa14b795b9046b326e5bc0235049a5710c765.camel@student.tugraz.at> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1620574189; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=0bUFgFjc6m4hjCQ02ItDECsSrgPd0MOS+gdROA2ZWKI=; b=uW0dcVVZLhvfAzpI3lG/X9mZVE8sdQGEjQu4ZfZVIe7N8NEE503OHNGvFmbCPBjpZpvbYT ouKN5yIyfdd9gmpRBsFvXTHpAzP6jZS82Db8AVAPlXtEh3f7vFxOjSY+Pqy4L03xN+Eun6 3pERHVLIdS3TnI248G3VU2WPCubn7cE/FRKNJCeW6KAweywLjo6OSyGNyBKAbL/RhMpAgK 6i8yexqBAKTbcjHEFWSu+s0/47GqKug0wYfSRP/qNTUHTdzyxTEG4bD8e2scy8WamVei07 IxFhz8HI4c63fF8UyMI2nYqzVgl7FXUZ17E2Oo7bHPw8JxVObc2H12kWGD1+dg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1620574189; a=rsa-sha256; cv=none; b=jBitxFnx8Y38gS9U9vAdFcxo/vcvvH/1P5tCH0WFMpVE1g+8FCR7GlpjMANqiXe/eGVmls 1l/OWX3Eoqgm6ek212T9guCyFWGzlTgzHiPK1s5dET5HRyDMRCQyK5hNcLStc9RbSKCkKn lWOBiJg2r2rOoFa41qu+1ueFeSXLZjbz2ZMUvjwO6yrWTZn8lVUT8DT8slj0xTIvubJAZM M5GTl415AfFMZ/8SP23h4+TR3CXfs8rcYCWYEqkplYWwRybYWu4N8+XTW49NeqFMZu30dU NjPe3c7WxuVmzmuK7FAWAQ/OafK/M3l62++Nqs1x9Zzx916t1rD0S0ddaC6jwA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=pUmlPYm2; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b="KOcFpBU/"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -1.45 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=pUmlPYm2; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b="KOcFpBU/"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 07C331A4AD X-Spam-Score: -1.45 X-Migadu-Scanner: scn0.migadu.com X-TUID: tX7WQmpVjU+J On Sun, May 09, 2021 at 04:37:39PM +0200, Leo Prikler wrote: > Indeed, the mail they dropped over at guix-devel made it seem as though > not being on 2.3.0 was a security risk already. The ChangeLog does > mention some items worth fuzzing over. In general, all updates are security updates. But we shouldn't / can't update all core packages with grafts just because. Grafting is a kludge that doesn't always work as expected (and the problems are hidden), and it has a high I/O performance cost. So, let's wait for a security advisory.