[bug#60304] [PATCH core-updates] gnu: libksba: Update to 1.6.3.

[bug#60304] [PATCH core-updates] gnu: libksba: Update to 1.6.3.

[Simon Josefsson via Guix-patches via]

[-- Attachment #1.1: Type: text/plain, Size: 394 bytes --]

Hi.  

This patch updates libksba to 1.6.3 on the core-updates branch, which
goes together with the security graft to 'master' that I posted here:
https://lists.gnu.org/archive/html/guix-patches/2022-12/msg01053.html

I have built it and tried to test it, but I'm not certain what a good
way to test that a newly built package works as expected, so I'm looking
for feedback.

/Simon

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1.2: 0001-gnu-libksba-Update-to-1.6.3.patch --]
[-- Type: text/x-patch, Size: 1091 bytes --]

From c4cccf53eb931493192af1f8e5bd52bbf1779664 Mon Sep 17 00:00:00 2001
From: Simon Josefsson <simon@josefsson.org>
Date: Sun, 25 Dec 2022 00:19:28 +0100
Subject: [PATCH core-updates] gnu: libksba: Update to 1.6.3.

* gnu/packages/gnupg.scm (libksba): Update to 1.6.3.
---
 gnu/packages/gnupg.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/gnupg.scm b/gnu/packages/gnupg.scm
index e04c4671b4..6c103a4b36 100644
--- a/gnu/packages/gnupg.scm
+++ b/gnu/packages/gnupg.scm
@@ -233,7 +233,7 @@ (define-public libassuan
 (define-public libksba
   (package
     (name "libksba")
-    (version "1.6.1")
+    (version "1.6.3")
     (source
      (origin
       (method url-fetch)
@@ -242,7 +242,7 @@ (define-public libksba
             version ".tar.bz2"))
       (sha256
        (base32
-        "017aqq619yl1br46ghiw39n1yrh3cvdkhy926c4gl4faqdj0hxa0"))))
+        "0p6y82j9y6n0l7scjgqhz3as9w13jiqjfx9n2jzynw89nf6wcwiz"))))
     (build-system gnu-build-system)
     (propagated-inputs
      (list libgpg-error))
-- 
2.38.1


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 255 bytes --]

bug#60304: [PATCH core-updates] gnu: libksba: Update to 1.6.3.

[Tobias Geerinckx-Rice via Guix-patches via]

Hi Simon,

On 2022-12-25 0:28, Simon Josefsson via Guix-patches via wrote:
> This patch updates libksba to 1.6.3 on the core-updates branch

Thanks!  Pushed as b8d684af76a41f5856b73640eb6f21940f214497 on 
core-updates.  Someone's working on updating gnupg there.

> I have built it and tried to test it, but I'm not certain what a good
> way to test that a newly built package works as expected, so I'm 
> looking
> for feedback.

I don't have a universal answer handy, but in this case I just built & 
installed the corresponding gnupg package.  Then I restarted the agent 
and did stuff: sign the above commit; ssh into a box; …  It worked.

Also, users are already running gnupg built against libksba@1.6.2 with 
libksba@1.6.3 thanks to your graft, and I haven't heard any complaints 
yet.

Kind regards,

T G-R

Sent from a Web browser.  Excuse or enjoy my brevity.