From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id n0CjOAyDsWHKAQEAgWs5BA (envelope-from ) for ; Thu, 09 Dec 2021 05:16:12 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id iGDKMwyDsWFKLQAA1q6Kng (envelope-from ) for ; Thu, 09 Dec 2021 04:16:12 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8137928711 for ; Thu, 9 Dec 2021 05:16:12 +0100 (CET) Received: from localhost ([::1]:50912 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mvAqp-0006zQ-Jb for larch@yhetil.org; Wed, 08 Dec 2021 23:16:11 -0500 Received: from eggs.gnu.org ([209.51.188.92]:34814) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mvAqg-0006xA-Vx for guix-patches@gnu.org; Wed, 08 Dec 2021 23:16:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:58792) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mvAqg-0001KB-Ns for guix-patches@gnu.org; Wed, 08 Dec 2021 23:16:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mvAqg-00076x-IE for guix-patches@gnu.org; Wed, 08 Dec 2021 23:16:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#52377] [security 1/2] gnu: BIND: Update to 9.16.23 [fixes CVE-2021-{25218, 25219}]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 09 Dec 2021 04:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 52377 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: Tobias Geerinckx-Rice Cc: 52377-done@debbugs.gnu.org, 52377@debbugs.gnu.org X-Debbugs-Original-Cc: 52377-done@debbugs.gnu.org, guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.163902333627295 (code B ref -1); Thu, 09 Dec 2021 04:16:02 +0000 Received: (at submit) by debbugs.gnu.org; 9 Dec 2021 04:15:36 +0000 Received: from localhost ([127.0.0.1]:42105 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mvAqG-00076B-AI for submit@debbugs.gnu.org; Wed, 08 Dec 2021 23:15:36 -0500 Received: from lists.gnu.org ([209.51.188.17]:52558) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mvAqE-000763-0Z for submit@debbugs.gnu.org; Wed, 08 Dec 2021 23:15:34 -0500 Received: from eggs.gnu.org ([209.51.188.92]:34128) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mvAqD-0006uz-RU for guix-patches@gnu.org; Wed, 08 Dec 2021 23:15:33 -0500 Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:50835) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mvApk-00016V-DV for guix-patches@gnu.org; Wed, 08 Dec 2021 23:15:33 -0500 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id F238E3200B5E; Wed, 8 Dec 2021 23:15:01 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute6.internal (MEProxy); Wed, 08 Dec 2021 23:15:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=ZvbCIITU75q4yh0E6zBj3S+x 66R/+ZWFKe9G2gm/e+g=; b=GrIM6bdC0gHuczst7qjGqCOgT0GvgiR2CH0e6vHv YoNBqFeS+BZbY1Q+bAZIQJ2RW8xFPYyUqF/LFh7KJ1lzvcy2rquXQXW87OaEna/d JunwB9JLCjUVdcGvAZp8FLuMMowakJUN+kLiGlNTiRdliwtE2QJDSSjq7P9GbSn1 Ldk= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=ZvbCII TU75q4yh0E6zBj3S+x66R/+ZWFKe9G2gm/e+g=; b=KH90Ytkrc6cQGxTihIFei7 kAndL0VfcowpfBkW6y5GiklLlbICjV0kb25upliirqLmbhzxq4kO791/t+M1qSxO y/DYxkhigl2n1vHngNjwLhNUHKwBLm7CZ9gD2cLbLeVB7BbagCEbxDhxjAePt6b1 vkpbOcqrO/KgORg1Yld1PEvZ1pZqzSkO1U29Ryn841CQz/RQ7CTzcXhQN3N9+PR4 OcEKqXvRYZYOaWlmjJlBvxFJyxxlnUIF1ZUQDtkZF0JbBTSva5i+pKk/8wK4QFxX d+MPMVxpv7Ni5CZ2wifNEVkuOwvHlHpW6VBVGh7EzBC/Q2uKecIRNjjrs23hnxJg == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvuddrjeelgdejtdcutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjsehgtderre dttdejnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeeigffhfeeftdffkeevkedttdeikeefff eltdfgveekkeetueeftdefhfeghfekfeenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 8 Dec 2021 23:15:00 -0500 (EST) Date: Wed, 8 Dec 2021 23:14:59 -0500 From: Leo Famulari Message-ID: References: <58bbbfdf122385ca92de71aaa5bbe7a113ec0980.1638993806.git.leo@famulari.name> <87fsr2vcif.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="LQxjJFg4dSH8PAyc" Content-Disposition: inline In-Reply-To: <87fsr2vcif.fsf@nckx> Received-SPF: pass client-ip=64.147.123.25; envelope-from=leo@famulari.name; helo=wout2-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1639023372; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=ZvbCIITU75q4yh0E6zBj3S+x66R/+ZWFKe9G2gm/e+g=; b=j9/A0zDUvCq7IAtTfgO/hpEeoBa44G3O3+yxN9rfz4DJ5niuUEfav1eLoU58Oq0+acmZN9 9+rfdn5xpOs4gXVSlIPHj/qDYyvREj8wRaQqxq5lq5wqy+dl6vBcUjZRceyw/E+u2/fPg0 bqGKxAE7x1TeUD9vKp5oyDhJ+4hEAvvAuHk7yGLCSv3dZiufr6o4tylaOcJhU80odp+OMN 1XQ9iGZ5nT+dsN2P+nL9paJhwch34Nr20cU558aAeptEMwYX5Zh4XIaOssOgSXmaZ09aWL AfW0Mp61yL7ti6EvrC3b5wriAPoe6vX2Gh9FBDHX0LbT5/zhciVu5pmbeOJV/g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1639023372; a=rsa-sha256; cv=none; b=Cqm09e2tPPk+jUrtJ+ryYMVpnFpYA64c/adXebTURf8dbSZeeIPBnj5Ktm94SVBFn12IUZ QlxOjX5vWK7tDlOC5dwz4EeZJqO3S2MQsHb/u+lThkBIJmeVNowc0YWPLMVwF/wnS6gei7 ACHKnd+ywkrepwGIQ2tyleuaigPbRNUBVaZXp4Fvj8MBJGK33pXKni7ZTEAyKGj9I9q2rk MUirBRCAeYyQgtHzroCe6A7rh7NPJ72052fGlFmme3JD2eVxpHNW9BfHkjI8dJocSwkcqn rDuK2ZVQnRJWr3uwd1uafX1i5oe/lpNAzhB6zGqvfpvbzu4rWdcT9M1v/NSzzg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=GrIM6bdC; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=KH90Ytkr; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.35 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=GrIM6bdC; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=KH90Ytkr; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 8137928711 X-Spam-Score: -4.35 X-Migadu-Scanner: scn1.migadu.com X-TUID: t73HVGysX53k --LQxjJFg4dSH8PAyc Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Dec 09, 2021 at 01:29:17AM +0100, Tobias Geerinckx-Rice wrote: > I updated BIND to 9.16.23 in commit > 4ca0e9d5f77ec309a5a8a7eba3d97fd3bb4852d5, which reverts the upstream comm= it > that caused this new test failure. I had to tediously bisect this; I nev= er > would've guessed it was to blame. Thanks for doing this work. You said it was tedious, but I'm curious if you have some scripts for bisecting Guix packages through upstream Git history? > The patch won't keep forever. Bug reports to ISC seem to require a GitLab > account. Can't say I'm in a terrible rush to create yet another one. Do > you have one? I probably can't look at this until next week (vacation). > Maybe this problem will just go away with a newer GCC. We can hope=E2=80= =A6 It's worth a try. > I went ahead and pushed your matching isc-dhcp patch. I wouldn't normally > do this to people with commit access but it seemed justified. I'm happy you did it! --LQxjJFg4dSH8PAyc Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAmGxgsMACgkQJkb6MLrK fwiQyA/8CugzrLjEFw6mRmi2OrEzPbWSYTPm1KWRdZpQDISxuIF08DqEkU3fverY yfuYvmiTjAvxKkRMEm00tO0EiRwNX0U+umW8AiNu+dd15Lfu1/L6RKPY3In02nhE Cvt12ROeQRqz+ASlijvnTNV8W48KQAvBhlim04vz/QHuyBGDKvZXP1jSIC9ulGOc 0SsL2Pb0olhvPoKPaj/M9da9cBnpuox8hj8DMw5J9BTM3C1/+qkFZbcSj/pNJWXa 1AN93u7csRcO6JTCmsx65jjgiymfHri1wZKG/roFIQxG7b4KkZno1P0kYfwE05+o uWqtsA2cwYyYqax1Gw9bq9hCe6Z4J4+xp/gis+lqFaNA8JxUFd7y3Y4CCuFhBYRt eRqTNcP8/WsBrjrDcMCpx7VGOtWEFYM3AJ7Kwt3nT4fk2TQrQ66GyXSDOJ6KioXr sU6AF+vDWSqNDVy6+K9JVFZZwGJAq5n2LZT+/YjRJO9Iz6qrbIiu66XyOHb9kbKd i349xf8dBFk5QvtvgwjofjyY0COoHTNHymVLIB3qq6zyeS/5iqytMQlVib+rpJek XpBqh5r7RVPrTJAZlbN4jKIt/t+lwZCt5MwqhyE/4TRo0isQC+Hfim88TrCp9VWu xIPdlGJZm5EaWdn5J7YuL9xbbdche4W42zpLamxbaSnfFB1Bync= =X/XT -----END PGP SIGNATURE----- --LQxjJFg4dSH8PAyc--