From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id yFgbMmBmKGfyJQAAqHPOHw:P1 (envelope-from ) for ; Mon, 04 Nov 2024 06:14:57 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id yFgbMmBmKGfyJQAAqHPOHw (envelope-from ) for ; Mon, 04 Nov 2024 07:14:56 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=Csh9qKC4; dkim=fail ("headers rsa verify failed") header.d=ngraves.fr header.s=ovhmo4487190-selector1 header.b=TbHfSHxi; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1730700866; a=rsa-sha256; cv=none; b=eZH38nxfIdCeiVwDGLGzoFnoSN+uoI15RWikrccqWEF7wqnZx4eLc/8NbJ7hujH67X6xLx x3+Wh92pOVJmXQ217i0ExT/bius1gqHEaai8DDXVyPJIHhcCIWH25YyfYqQL/IbGfZyn1R BYeYPdhTNh/Mu9RU8MgsffGmg5XX7HwBtYZoNo/eGLDh30B5K4kZCzkdQdaJnwAlllrhWX p68ucLUKTwXK7H0sI8r/ec9Y08WWdplJwC1wbw3phpKOLdVNuEasJ2mAZhIhLwVwwWdvqT LE6l99bSjcDR22kI6p8VnmQQo+Ma7Gav+T/Sm4oFNO2XmQF/x2kCznQYd3wFgg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=Csh9qKC4; dkim=fail ("headers rsa verify failed") header.d=ngraves.fr header.s=ovhmo4487190-selector1 header.b=TbHfSHxi; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1730700866; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=saF2pu71GT4PjgYBpXyQXLCj7XAzY/84cl61QXciVxY=; b=FrCyTBrsFmYOaMK0Jcjh7YJ/9iRJOU6I9jJfHVie7gpPTYixSuVwe1/SHaaVED+ZhiYIdU sqqlEA+EQhEiPiPuljppIxh5DHr/z3cYmWwOYtxzyxLjcTY/CixQJq86cxNufIUSfItBAj Iqi6dShQDvbnKYDt7orVgvTWXiv/5v0AqLc9SDaC5ErI2VkCKBTmfFp+epVoBb6EqaiItW 8pDixhrDzIoySaMiHbKO4Y2tPYiPaH1CbsTl3qB63LI+XIpWtohmyjghSBPqffWjAp3qH7 /WY08DzRZlLTpfBFHQV1Az1L5vtjZXrB56oCorajf1xTbdOTl42p5z9xsaMupw== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 34E3F1DE64 for ; Mon, 04 Nov 2024 07:14:26 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1t7qLn-00013c-BQ; Mon, 04 Nov 2024 01:14:07 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7qLj-00012u-FO for guix-patches@gnu.org; Mon, 04 Nov 2024 01:14:03 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t7qLi-00060A-8C for guix-patches@gnu.org; Mon, 04 Nov 2024 01:14:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:References:In-Reply-To:From:To:Subject; bh=saF2pu71GT4PjgYBpXyQXLCj7XAzY/84cl61QXciVxY=; b=Csh9qKC4W6OCf7chNwLRWXFDPYvqGk4EOcEmWjShnblSuawVjH6Ap4Ocn3cX+q79EMHxP5gPd6ji3uEcjb1UM/LnZvObkLbDo/J8E/rs6NwfUcFjI7hmnSqaNEn0EWxPtVYAU37UUa7+g2N1M/pXHcuy8QsJNgGIlnOzEMwst4oGdCL2uV9gu7iR4sI1mC/GZp/Pu70faojjGeakqe6kfZluaaee2yjtHD1nhuUT88dpbjlvHJF/gfLIcuO/CC6cCn2JfLTq1mUynyU/EVUPVOF4Nl+hCpBCewR+gBcgY0JyP077wZnvO6a4M5tE9o1V/eIOaThcTmKicpsopJRqKg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1t7qLh-00063Y-Ss for guix-patches@gnu.org; Mon, 04 Nov 2024 01:14:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#74199] [PATCH] gnu: zlib: Update to version 1.3.1 Resent-From: Nicolas Graves Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 04 Nov 2024 06:14:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 74199 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 74199@debbugs.gnu.org Cc: Aaron Covrig X-Debbugs-Original-To: Aaron Covrig via Guix-patches via , 74199@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173070083923265 (code B ref -1); Mon, 04 Nov 2024 06:14:01 +0000 Received: (at submit) by debbugs.gnu.org; 4 Nov 2024 06:13:59 +0000 Received: from localhost ([127.0.0.1]:37573 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7qLe-00063B-Re for submit@debbugs.gnu.org; Mon, 04 Nov 2024 01:13:59 -0500 Received: from lists.gnu.org ([209.51.188.17]:47904) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t7qLd-000635-BU for submit@debbugs.gnu.org; Mon, 04 Nov 2024 01:13:58 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7qLc-00012g-Pt for guix-patches@gnu.org; Mon, 04 Nov 2024 01:13:57 -0500 Received: from 4.mo560.mail-out.ovh.net ([87.98.172.75]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t7qLZ-0005zP-H2 for guix-patches@gnu.org; Mon, 04 Nov 2024 01:13:56 -0500 Received: from director3.ghost.mail-out.ovh.net (unknown [10.108.25.233]) by mo560.mail-out.ovh.net (Postfix) with ESMTP id 4Xhh4D49qBz1byd for ; Mon, 4 Nov 2024 06:13:48 +0000 (UTC) Received: from ghost-submission-5b5ff79f4f-gfxm6 (unknown [10.110.118.167]) by director3.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 378E71FD27; Mon, 4 Nov 2024 06:13:47 +0000 (UTC) Received: from ngraves.fr ([37.59.142.102]) by ghost-submission-5b5ff79f4f-gfxm6 with ESMTPSA id xrq/AxtmKGdofTUAozXF8w (envelope-from ); Mon, 04 Nov 2024 06:13:47 +0000 X-OVh-ClientIp: 86.246.19.221 In-Reply-To: <20241104025149.1380320-1-aaron.covrig.us@ieee.org> References: <20241104025149.1380320-1-aaron.covrig.us@ieee.org> Date: Mon, 04 Nov 2024 07:13:45 +0100 Message-ID: <87cyjbwmp2.fsf@ngraves.fr> MIME-Version: 1.0 Content-Type: text/plain X-Ovh-Tracer-Id: 7357755891759899149 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: -100 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeftddrvdelhedgleefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhephffvvefujghffffkgggtsehttdertddttddtnecuhfhrohhmpefpihgtohhlrghsucfirhgrvhgvshcuoehnghhrrghvvghssehnghhrrghvvghsrdhfrheqnecuggftrfgrthhtvghrnhephfegtdejveetvdegleeiuefgteevtdelieeguefhvdejteejjeffuedviefftdffnecuffhomhgrihhnpehgihhthhhusgdrtghomhenucfkphepuddvjedrtddrtddruddpkeeirddvgeeirdduledrvddvuddpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepghhuihigqdhprghttghhvghssehgnhhurdhorhhgpdfovfetjfhoshhtpehmohehiedtpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=saF2pu71GT4PjgYBpXyQXLCj7XAzY/84cl61QXciVxY=; c=relaxed/relaxed; d=ngraves.fr; h=From; s=ovhmo4487190-selector1; t=1730700828; v=1; b=TbHfSHxi53sH2IKzV0g2CvhNoIV6h7ES9ULRvqhPK7DjIQwOwLwnpDyy3gvJxHHIYc43fOrI 7Z8Qwy5DM0MMiHrV3Ar9vQHQXDEPnUgtIYJ/QzPUnre7nWk7EcWoSTUCU3VrSm4VbDZL8i7/fDf kKUR/Y/X5sw1pq6ksGf9Hkq73gebE0G7b2T62MprdfTfctE20CiS5VHN19ILy15xDIRBRd68UFA 1wKTjwgofH+FCOf7orUOv1s1N8O1ueOsB0jX0dZddLcSj1E1F6+IpicKSMvWhaO3mRhQ2sufujy HYhtBhdLE4aMn3EmcXM9rolWZKZb4Da+tQLQnoTg5KIuQ== Received-SPF: pass client-ip=87.98.172.75; envelope-from=ngraves@ngraves.fr; helo=4.mo560.mail-out.ovh.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Nicolas Graves X-ACL-Warn: , Nicolas Graves via Guix-patches From: Nicolas Graves via Guix-patches via Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: 0.56 X-Spam-Score: 0.56 X-Migadu-Queue-Id: 34E3F1DE64 X-Migadu-Scanner: mx12.migadu.com X-TUID: 96KXLqlv7aGE On 2024-11-03 21:48, Aaron Covrig via Guix-patches via wrote: > * gnu/packages/compression.scm (zlib): Update to version 1.3.1 > --- > > The zlib version 1.3.1 update addresses CVE-2023-45853, > see issue: https://github.com/madler/zlib/issues/868 Hi Aaron, This is true, but rebuilding zlib will rebuild more than 30000 packages. You can see that with guix refresh -l zlib | cut -d : -f 1 That's why we can't simply merge a patch like that. There are two solutions in this case, to my knowledge: - use a graft (see the manual, or packages with a "replacement" field) - wait for core-updates to pick up this commit In the meantime, marking this commit as moreinfo, we don't want to compute the revision for this. -- Best regards, Nicolas Graves