From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id +EL0KmAt8WMcXwEAbAwnHQ (envelope-from ) for ; Sat, 18 Feb 2023 20:56:16 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id QO//KmAt8WM/ZwAA9RJhRA (envelope-from ) for ; Sat, 18 Feb 2023 20:56:16 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3AE0514368 for ; Sat, 18 Feb 2023 20:56:16 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tobias.gr header.s=2018 header.b=XDMsWOeG; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1676750176; a=rsa-sha256; cv=none; b=AiABeD85IgCDH6kiuUGVG1dOJe4T1SivTo1uSUD6o0EIP3bYo1vR/jgQpwhm7atmBk3dGu 0DNZzWVwD2w/BezjoOVsK6IfsolyyFYYukWebypAMJzyGpBpJatOSIX21LNzis4OI4GTM8 KRr9tAY8r3Z2INq8gAH8+mXAtcnb3uv02zrn/ojHS+yH5tBimBGpIUO5yqQeSq3/V8BJnB QpXyek3Bun/4MdH7gvNr1LvQhQMU+9ZItsdMXsI7BggbSb22hbHiVDaipcN9F0juGqwg1z XYJQXCkULLgUACJekFDlAkRKHgtDbZakclLrqHYPoPF6Ix37KMaMQUpzAoIBcQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tobias.gr header.s=2018 header.b=XDMsWOeG; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1676750176; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=tDxTw9hizoSiqaXvCcg7RERkkVN29NncMJYCYggPkv4=; b=j+7xsNuuGjOBUwYUnDWnUoOyScBuBBQvMGywyVcCgwGladZmx2StGwr6qxJW5Jsycjnm78 J6CqbUQUfMG5VeU2SRQQ+hUiv2mxSBcJgp6MOfZY00g77yPBaCPa6E1EKclJfTamgSAWFj nEj0LWOgW3WwE9iNT/6n4nwzOKI4jar6lRbihsbUhCs5mNUvIXxrVWZreVisBJtA2SUfxY K7Mzkyhk0RnhhOe6FahqkbkSvCizyLHZL/7w6rsjlCQRVNK28IVQ4TX8SiFWfbIyfoPPq3 MU9QI9tND223H5oAYKXkp5WEPLocbVuSAFncvZUaMBvYby0hHAReVwPqS1c12w== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pTTJV-0000SU-Ef; Sat, 18 Feb 2023 14:56:05 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTTJT-0000Ra-16 for bug-guix@gnu.org; Sat, 18 Feb 2023 14:56:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pTTJS-0000ai-P0 for bug-guix@gnu.org; Sat, 18 Feb 2023 14:56:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1pTTJS-0000S2-Ac for bug-guix@gnu.org; Sat, 18 Feb 2023 14:56:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#32026: [PATCH v3 10/11] gnu: nss-next: Update to 3.88.1 [fixes CVE-2023-0767]. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 18 Feb 2023 19:56:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 32026 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: mhw@netris.org, 32026@debbugs.gnu.org, ludo@gnu.org X-Debbugs-Original-Cc: Mark H Weaver , 32026@debbugs.gnu.org, bug-guix@gnu.org, ludo@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16767501061658 (code B ref -1); Sat, 18 Feb 2023 19:56:02 +0000 Received: (at submit) by debbugs.gnu.org; 18 Feb 2023 19:55:06 +0000 Received: from localhost ([127.0.0.1]:45004 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pTTIX-0000Qg-VR for submit@debbugs.gnu.org; Sat, 18 Feb 2023 14:55:06 -0500 Received: from lists.gnu.org ([209.51.188.17]:52466) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pTTIW-0000QY-Ne for submit@debbugs.gnu.org; Sat, 18 Feb 2023 14:55:05 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTTIW-0000HS-4j for bug-guix@gnu.org; Sat, 18 Feb 2023 14:55:04 -0500 Received: from tobias.gr ([80.241.217.52]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pTTIU-0000AA-6I; Sat, 18 Feb 2023 14:55:03 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=tDxTw9hizoSiq aXvCcg7RERkkVN29NncMJYCYggPkv4=; h=in-reply-to:date:subject:cc:to: from:references; d=tobias.gr; b=XDMsWOeGh397TZaQ1xb0D8E+AppcIWIhfDnTZp 4NIwMHcJuvSxbHygL8KAk6xHZmugMJk0P150pQLIzP0L3jg72m/uzxOcLz+pCYbCi55ErZ efpa4BDmd3EjYGFjDHPYQLYi+xYKd6i9oo3SmAIySl4fETisUMQ8raUtcMqwKzRmHeIVDt VAN3NpN3sn//wmJXFEanCwj2Lu0MgPIk6YIaAUxPAaA8kd5rNcG+q2YEZlaBIVKAmwnLtj S/Tuo5RtxVz7AYDC+q6RUFp0e4CKWPyH0lFWNJd4YWVtEQOWakxzewhG+d3VwtfHh5ACwq nY4GvnLGbitgbv1dDfWHfPcg== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id a6ba87b5 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Sat, 18 Feb 2023 19:54:55 +0000 (UTC) References: <20230217125539.24467-1-maxim.cournoyer@gmail.com> <20230217125539.24467-10-maxim.cournoyer@gmail.com> <873574dlal.fsf@netris.org> <87r0umq3y4.fsf@gmail.com> Date: Sat, 18 Feb 2023 20:49:36 +0100 In-reply-to: <87r0umq3y4.fsf@gmail.com> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87cz66wxut.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=80.241.217.52; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Migadu-Queue-Id: 3AE0514368 X-Spam-Score: -4.43 X-Migadu-Spam-Score: -4.43 X-Migadu-Scanner: scn0.migadu.com Reply-to: Tobias Geerinckx-Rice From: Tobias Geerinckx-Rice via Bug reports for GNU Guix Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-TUID: NR1WBoFBxObI --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Maxim Cournoyer =E5=86=99=E9=81=93=EF=BC=9A > It's already been pushed for nss-next, and Tobias has taken care=20 > of > grafting our main 'nss' package, which has many dependents. See=20 > commits > 246a3d90eac82966b691bdca4660ab9c5d802631 and > b04ee227a47419291391a2b6e857e41ed1c32155, respectively. Grafting such a big version jump made me nervous. I did so anyway, partially on Mozilla's assurance (FWIW) that it's=20 ABI-compatible, but mainly because I dare not vouch for a single=20 cherry-pick to 3.81 actually keeping users safe. I'd much rather deal with ABI bug reports than the alternative :-) Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCY/Etmg0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15TdUBAMKj3g3wLJVhA/m4xw8hoLGfo66LUzFMh7oWq5kN TGybAPsETxDzGWnae8NXHEePVrybWseuvIPLkiQj4D4+wXfpBw== =r6u0 -----END PGP SIGNATURE----- --=-=-=--