From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id ADkbLtL8+WSmqAAAauVa8A:P1 (envelope-from ) for ; Thu, 07 Sep 2023 18:39:46 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id ADkbLtL8+WSmqAAAauVa8A (envelope-from ) for ; Thu, 07 Sep 2023 18:39:46 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 710C9391FE for ; Thu, 7 Sep 2023 18:39:46 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1694104786; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post; bh=WNsC567AGGvRuLqJr6W0pRCOYPl7XIAkUP8CbvFlzF4=; b=Pw5QLO7DDsxwRHVvDE6uvKuDRPBUIqRMUjLFLrWMKQ9RXNbEP/VY9qihHBHv166v6chr8R q4KyR7bCSXWEITm4JWFLEkk7g/q6xZCabQwd24MhCffawG+Qd0vxELD5XbtMtvh0gVdJsp YMeUTOAPQdQLx0MgQWrnkjpCTR6fFPOALgwHn4quSxiaL41CofZXta8yHwAz0gDgwjDXgx fmYib2eDxefdBSdq2wDONrrSnjstGc7p5K4tYXSybDUPbnRDPfLHEfbEvBKUQYDfbF6dxp RXhmndNW3+3iahPr4GVXuEqH1yDpcpZyow/8CA0IX1cOW0z8kn8SRct9WKv2gA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1694104786; a=rsa-sha256; cv=none; b=R8bvwKjpR2I/KwEbpPcjJj/oc03M6R0z0Bmcy7bfafdHY/croMOHeXnz4ILLNjh/0gGKbm f4amP82SxDW+4Q4VxQW3FWXG9WWsDpSb+bZCNvjaI3se5DtN5disnsefoBS7xmFHB9bN7A QZGecj5zVuCryd4R7/ztumTikZM5T+xR3gjSTlHvQL/AA1w1zTc0FK5SgXB5xGtWT3uzyX J2rzazQ2CHABU2qB5obrSI9tM+AlZH5ot95CwxBsmw1Psr/QuvWKf77PjIWvpkRN99kZsJ 7XIp1kXtVJFhcRR7Wt8fiXoqwzNb789aiykfGYnSFqvXboyPfTCyVkSw9JzTQQ== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qeI26-0007SV-9w; Thu, 07 Sep 2023 12:39:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qeI24-0007Q5-5j for guix-patches@gnu.org; Thu, 07 Sep 2023 12:39:04 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qeI23-0000H6-Tq for guix-patches@gnu.org; Thu, 07 Sep 2023 12:39:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qeI25-0003wY-KK for guix-patches@gnu.org; Thu, 07 Sep 2023 12:39:05 -0400 Subject: bug#64982: Closing References: In-Reply-To: Resent-From: Andreas Enge Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Thu, 07 Sep 2023 16:39:05 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 64982 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 64982-done@debbugs.gnu.org Mail-Followup-To: 64982@debbugs.gnu.org, andreas@enge.fr, GNUtoo@cyberdimension.org Received: via spool by 64982-done@debbugs.gnu.org id=D64982.169410473315072 (code D ref 64982); Thu, 07 Sep 2023 16:39:05 +0000 Received: (at 64982-done) by debbugs.gnu.org; 7 Sep 2023 16:38:53 +0000 Received: from localhost ([127.0.0.1]:41234 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qeI1t-0003v2-9P for submit@debbugs.gnu.org; Thu, 07 Sep 2023 12:38:53 -0400 Received: from hera.aquilenet.fr ([185.233.100.1]:54700) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qeI1q-0003ul-GJ for 64982-done@debbugs.gnu.org; Thu, 07 Sep 2023 12:38:51 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id B5981F5F; Thu, 7 Sep 2023 18:38:42 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at hera.aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X4fHR__b_Vdh; Thu, 7 Sep 2023 18:38:41 +0200 (CEST) Received: from jurong (unknown [IPv6:2001:861:c4:f2f0::c64]) by hera.aquilenet.fr (Postfix) with ESMTPSA id B9CEB20A; Thu, 7 Sep 2023 18:38:41 +0200 (CEST) Date: Thu, 7 Sep 2023 18:38:40 +0200 From: Andreas Enge Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: 710C9391FE X-Migadu-Scanner: mx1.migadu.com X-Migadu-Spam-Score: -5.73 X-Spam-Score: -5.73 X-TUID: 04TxV6yGVDri Hello Denis, thanks for the patch! This was fixed in commit commit 310b0f72d8749376832fa1f149837a83d8e74629 Author: Tobias Geerinckx-Rice Date: Sun Aug 13 02:00:00 2023 +0200 gnu: libressl: Update to 3.7.3 [fixes CVE-2023-35784]. Thanks to Dennis 'GNUtoo' Carikli for , but upgrading to 3.8.0 breaks (at least) OpenSMTPd. * gnu/packages/tls.scm (libressl): Update to 3.7.3. Indeed QA shows that opensmtpd fails: https://qa.guix.gnu.org/issue/64982 https://bordeaux.guix.gnu.org/build/16cbfca4-a0a3-4374-9ae4-6c1dad67494b/log I am closing this bug, as updating libressl to the most recent version is a different topic. Actually the 3.8.0 and 3.8.1 releases are called "development releases" in the release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.0-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.1-relnotes.txt while 3.7.3 does not have the "development" term: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.3-relnotes.txt so we may be better off sticking with 3.7.x for the moment. Andreas