From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Handling =?utf-8?B?4oCYZmlsZeKAmQ==?= CVE Date: Thu, 13 Nov 2014 17:54:52 +0100 Message-ID: <87mw7vhwgz.fsf@gnu.org> References: <87389nl6wi.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59862) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xoxfg-0003wF-KZ for guix-devel@gnu.org; Thu, 13 Nov 2014 11:55:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Xoxfb-0007j7-5v for guix-devel@gnu.org; Thu, 13 Nov 2014 11:55:00 -0500 Received: from hera.aquilenet.fr ([2a01:474::1]:54911) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Xoxfa-0007j2-Ux for guix-devel@gnu.org; Thu, 13 Nov 2014 11:54:55 -0500 In-Reply-To: <87389nl6wi.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Thu, 13 Nov 2014 11:41:17 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Guix-devel ludo@gnu.org (Ludovic Court=C3=A8s) skribis: > What about this other option: make another public package, =E2=80=98file-= 5.20=E2=80=99, > next to =E2=80=98file=E2=80=99, such that when a user explicitly installs= =E2=80=98file=E2=80=99, they > get the new one? I ended up taking that route, in commit 310081e. The replacement caused too much churn on Hydra. Furthermore, it led to a serious increase in the installation image size, because several variants of a number of packages were present, and because =E2=80=98guix-register -p=E2=80=99 doesn=E2=80=99t deduplicate things. Ludo=E2=80=99.