From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: bug#22831: OpenSSL should not depend on Perl Date: Mon, 29 Feb 2016 19:43:33 -0500 Message-ID: <20160301004333.GA4741@jasmine> References: <87lh66xew6.fsf@gnu.org> <20160228011027.GC6690@jasmine> <87lh65vtu5.fsf@gnu.org> <20160229084815.GC18766@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33782) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aaYPY-0006bj-8G for guix-devel@gnu.org; Mon, 29 Feb 2016 19:43:37 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aaYPV-0001Mn-1Y for guix-devel@gnu.org; Mon, 29 Feb 2016 19:43:36 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:47004) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aaYPU-0001Mj-U7 for guix-devel@gnu.org; Mon, 29 Feb 2016 19:43:32 -0500 Received: from localhost (c-69-249-5-231.hsd1.pa.comcast.net [69.249.5.231]) by mail.messagingengine.com (Postfix) with ESMTPA id 526E06800F3 for ; Mon, 29 Feb 2016 19:43:32 -0500 (EST) Content-Disposition: inline In-Reply-To: <20160229084815.GC18766@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org On Mon, Feb 29, 2016 at 03:48:15AM -0500, Leo Famulari wrote: > On Sun, Feb 28, 2016 at 02:37:54PM +0100, Ludovic Courtès wrote: > > Leo Famulari skribis: > > > > > On Sat, Feb 27, 2016 at 06:05:29PM +0100, Ludovic Courtès wrote: > > >> Commit 784d6e91 changed OpenSSL such that it does not depend on Perl, > > >> but one of the subsequent upgrades broke it: > > > > > > Bisecting, I narrowed it down to: > > > 86c8f1daf8ed10f13f2b1e973a28845629b8ce47 > > > (gnu: openssl: Update to 1.0.2e [fixes CVE-2015-{3193,3194,3195}].). > > > > > > I'll get the openssl sources corresponding to the good and bad commmits > > > and try to figure out what changed that pulled perl back in. > > > > Also we should add something like: > > > > #:allowed-references (list (canonical-package glibc) > > (list (canonical-package gcc) "lib") > > "out") > > > > to avoid regressions. > > Okay, good idea. Normally I wouldn't forward mail from bug-guix to guix-devel. I need help with a patch addressing a bug that I'd like to see fixed alongside tomorrow's OpenSSL update, so I'm trying to increase the exposure. I need help setting up #:allowed-references: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=22831#23