From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id yFP8HottAmQkxQAAbAwnHQ (envelope-from ) for ; Fri, 03 Mar 2023 22:58:35 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id SCf5HottAmQ11gAAauVa8A (envelope-from ) for ; Fri, 03 Mar 2023 22:58:35 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6340D9458 for ; Fri, 3 Mar 2023 22:58:34 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pYDPg-0005XA-Lr; Fri, 03 Mar 2023 16:58:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pYDPf-0005Wt-7W for guix-patches@gnu.org; Fri, 03 Mar 2023 16:58:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pYDPe-00024f-La for guix-patches@gnu.org; Fri, 03 Mar 2023 16:58:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pYDPe-0007cj-HN for guix-patches@gnu.org; Fri, 03 Mar 2023 16:58:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#61583] [PATCH] gnu: git: Update to 2.39.2 [fixes CVE-2023-22490 & CVE-2023-23946]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 03 Mar 2023 21:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 61583 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Simon Tournier Cc: 61583@debbugs.gnu.org, Greg Hogan Received: via spool by 61583-submit@debbugs.gnu.org id=B61583.167788063129240 (code B ref 61583); Fri, 03 Mar 2023 21:58:02 +0000 Received: (at 61583) by debbugs.gnu.org; 3 Mar 2023 21:57:11 +0000 Received: from localhost ([127.0.0.1]:34085 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pYDOp-0007bX-3O for submit@debbugs.gnu.org; Fri, 03 Mar 2023 16:57:11 -0500 Received: from wout4-smtp.messagingengine.com ([64.147.123.20]:39565) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pYDOm-0007bG-9a for 61583@debbugs.gnu.org; Fri, 03 Mar 2023 16:57:09 -0500 Received: from compute6.internal (compute6.nyi.internal [10.202.2.47]) by mailout.west.internal (Postfix) with ESMTP id 0401F3200035; Fri, 3 Mar 2023 16:57:00 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute6.internal (MEProxy); Fri, 03 Mar 2023 16:57:01 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:cc:content-transfer-encoding:content-type:content-type :date:date:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:sender:subject:subject:to:to; s=mesmtp; t=1677880620; x=1677967020; bh=VTqyzzLHVdmat+w/ytwKqA qxrx5oBz4Od7Pj3DI5vso=; b=i8j3WE4FjdDIqV1ZufEElXvlSVPklISVTZ2MuI SwMBza+atNmLAI/zX8TGH2WIhnFtpNV4ZNiQIu2fSqES3gTHORFPSIrV4Ekh6/8N t1yUShAOWTdh6HvR/pE6N3tThiM9XYAgN8DM6Tzees1DqXOlZb4uDDENdqfshnv2 dek1E= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1677880620; x=1677967020; bh=VTqyzzLHVdmat+w/ytwKqAqxrx5oBz4Od7P j3DI5vso=; b=PmxrSFzsHmLIoT+95L7ZmuzC6llpqHAxeRzuRSv8k8AgGQWJ3E8 emO7V5mP8w1d7mdeuewFbXxouc6HA/W/pbCLYn4xiQM9WF0xHH1rNwuNZu8ee0PC K8NzskOEMTR8Op6U6IcwPh66cGWpwYVueWvrcqHPa63YeK0zlNLYSTiCfjf9cgnR THflvWbvZcn+YAlW99mlDd0vWNqt6mPqtR1TUz2QVFG6uZfXjtEfn8FfYH27rSW/ 8bMTkQoim2BxkuolDdk+XLOjKaJ8cG4BhJuV5L6Wrte4mmbXTycgk58vK4tjDfBE t6nmSgaR1UuQRA39KOjajmIAneZGXPHfg1g== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrudelledgudeglecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepfffhvfevuffkfhggtggugfgjse htkeertddttddunecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghm uhhlrghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeegvdduhfduuedugefgvefgue dvheevffefvdeltefgveeftdekiedvkeeuhedvvdenucevlhhushhtvghrufhiiigvpedt necurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 3 Mar 2023 16:57:00 -0500 (EST) Date: Fri, 3 Mar 2023 16:56:58 -0500 From: Leo Famulari Message-ID: References: <20230217180402.29401-1-code@greghogan.com> <87y1os36js.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87y1os36js.fsf@gmail.com> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Seal: i=1; s=key1; d=yhetil.org; t=1677880715; a=rsa-sha256; cv=none; b=TNAM1SkT29/teRUbhddEg0aNLxSq6Ryt/OB4l2UMokqBGbnvfv6NpKCJHUr6IgzKIn48ZU tBPaGDUGyuny1eCEpbXL8am2smC08od0RGZNkSTcbQXVwr3suPJle/UwQDPetWPJ1k0Feh vXlfth+z9DryGzbhT4UkDuB9gBqGgijGGA/E1GHWya8j5iHT1nO/qvKs/K1C/iYb9nrTkU 4QSFHk7Reso38c0Odahrt06tafq2dZO3a+AYTGU1VhCGstsepjk+5FTHd3CgcnJ0eMIMqG s1G8Ty9bAWTjs4B9PNXaAa/dbjXgLm9oQK3jDljwNyy8MF1PlFichh7BWX5pRw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=i8j3WE4F; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=PmxrSFzs; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1677880715; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=VTqyzzLHVdmat+w/ytwKqAqxrx5oBz4Od7Pj3DI5vso=; b=Qd7eUovRMGZU8Q3K4vNvGQ6nQepjfOQDwCJW8EHTdpLovkBpBJHqjgzbVO1JNOk7bFCoZq pr9hzik1JrgTIu2TTeU/eOgFDGwt0amgKwhPcjFtHNBQcn9YXpFJjg7k4JZjfpeWD9BOTT qoGzlEVZtmvRt9rx9VbkQS7XZ6HK3Djemb4+CVYbsCScp2imqzhgc/3UnsrRc4/iP7tXls QUo8octKFi1v1sKB6P5KdM9U55VW7p+FF/3+awY69zt3PPHDOBXzyyyeY85Y6h1/E/Ckj2 uOb8ValZEt/+lgGsyEHmYCH1RXlqa3l+oDbk9qiDGi0lZCOL2+buECMgMV1hJw== X-Migadu-Scanner: scn1.migadu.com X-Migadu-Spam-Score: -0.80 X-Spam-Score: -0.80 X-Migadu-Queue-Id: 6340D9458 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=i8j3WE4F; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=PmxrSFzs; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none X-TUID: 9XjylX0TpxjK On Mon, Feb 20, 2023 at 12:44:23PM +0100, Simon Tournier wrote: > On ven., 17 févr. 2023 at 18:04, Greg Hogan wrote: > > * gnu/packages/version-control.scm (git): Update to 2.39.2. > > As noticed previously for an update of Git, this implies a lot of > rebuilds because git-minimal inherits from git. ------ $ guix refresh -l git-minimal Building the following 43 packages would ensure 69 dependent packages are rebuilt: r-biocpkgtools@1.16.0 r-biocthis@1.8.1 r-biocworkflowtools@1.24.0 r-golem@0.3.5 r-megadepth@1.8.0 r-chromunity@0.0.1-1.09fce8b r-rnaseqdtu@2.0-1.5bee1e7 r-spectre@0.5.5-1.f6648ab r-battenberg@2.2.9 r-chemometricswithr@0.1.13 r-adapr@2.0.0 r-activpal@0.1.3 rust-git2-6@0.6.11 rust-git2@0.15.0 rust-git2@0.13.24 rust-git2@0.11.0 rust-git2@0.14.4 rust-git2@0.9.1 emacs-libgit@0.0.1-1.ab1a53a nuspell@3.1.2 kicad-doc@7.0.0 musescore@4.0.1 python-oslosphinx@4.18.0 conan@1.50.0 python-jupytext@1.14.1 snakemake@7.7.0 vorta@0.8.7 clipper@2.0.1 gnome@42.4 mate@1.24.1 r-prereg@0.6.0 python-ipython-documentation@8.2.0 python-numpy-documentation@1.21.6 nototools@0.2.16 python-clorm@1.4.1 python-telingo@2.1.1 python-screenkey@1.4 mbed-tools@7.53.0 snakemake@6.15.5 emacs-ghq@0.1.2 pre-commit@2.20.0 gitless@0.8.8 vlang@0.2.4 ------ That's not a significant number of packages. Overall, git and git-minimal will cause more than 300 rebuilds, but not too many for the current state of the build farm. Concretely, why can't we push this to master immediately?