On Tue, 31 Jan 2023, Ludovic Courtès wrote:

> Jack Hill <jackhill@jackhill.us> skribis:
>
>> Then there's the question of what to do in the meantime for
>> master. Grafts for 3.7.2? Move packages to 3.7.7?
>
> Graft, after making sure both versions are ABI-compatible (it should be
> the case).

Unfortunately, we may not be so lucky. ABI Laboratory* reports that were 
some changes in 3.7.3 [0]. Does that look like it would be problem? For 
reference, the fixes for the announced security advisories looks small 
enough that a backport is feasible (although I haven't tried yet) [1][2].

* I don't know if we have ABI checking tools in Guix. The ones that power 
ABI Laboratory look like candidates for packaging though.

[0] https://abi-laboratory.pro/index.php?view=compat_report&l=gnutls&v1=3.7.2&v2=3.7.3&obj=0a750&kind=abi#Symbol_Problems_High
[1] https://gitlab.com/dueno/gnutls/-/commit/22f837ba0bc7d13c3d738a8583566368fc12aee1
[2] https://gitlab.com/gnutls/gnutls/-/merge_requests/1615/diffs

Anyways, I'm of course happy to propose some patches (keeping in mind the 
usual competition for my time, so it might be a couple days).

Best,
Jack