bug#22650: guixSD default umask is 0000

2016-02-29 Thread myglc2
l...@gnu.org (Ludovic Courtès) writes: > myglc2 skribis: > >> glc@g1 ~$ ssh glc4@g1 >> glc4@g1's password: >> glc4@g1 ~$ umask >> > > Oh indeed, I can reproduce it. > > The problem is that lshd resets the umask when it starts (in > src/daemon.c:daemon_init) but never

bug#22831: [PATCH 1/2] gnu: openssl: Remove run-time dependency on Perl.

2016-02-29 Thread Leo Famulari
Fixes . * gnu/packages/patches/openssl-c-rehash.patch: Update patch to also replace the shebang of 'c_rehash.in'. --- gnu/packages/patches/openssl-c-rehash.patch | 14 ++ 1 file changed, 14 insertions(+) diff --git

bug#22831: [PATCH 0/2] OpenSSL / Perl run-time dependency

2016-02-29 Thread Leo Famulari
Patch 1/2 updates the patch we use to keep Perl from becoming a registered run-time dependency of OpenSSL. Patch 2/2 is an attempt to use #:allowed-references to prevent Perl from sneaking back in again. Unfortunately, it fails when gcc is an allowed reference. It "works" when gcc is not in the

bug#22139: Indirect dependencies are not grafted

2016-02-29 Thread Ludovic Courtès
l...@gnu.org (Ludovic Courtès) skribis: > The grafting mechanism has a shortcoming: it is not recursive. > > Suppose we use ‘replace’ to provide a patch libpng. If a package has a > direct dependency on libpng, it is appropriately grafted to refer to the > new libpng. However, if a package

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
Christopher Allan Webber writes: > Leo Famulari writes: > >>> I'm trying to figure out where the patches for this are, but I can't >>> find them. I expected them to maybe be here, but I don't see them here: >> >> I updated python-pillow to 3.1.1 with 16095d2729, fixing these issues. >> >> When I

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
Leo Famulari writes: >> I'm trying to figure out where the patches for this are, but I can't >> find them. I expected them to maybe be here, but I don't see them here: > > I updated python-pillow to 3.1.1 with 16095d2729, fixing these issues. > > When I did that, CVE-2016-2533 wasn't named yet,

bug#22826: gnupg test failure

2016-02-29 Thread Mark H Weaver
l...@gnu.org (Ludovic Courtès) writes: > Mark H Weaver skribis: > >> Danny Milosavljevic writes: >> >>> gnupg fails its tests: >>> >>> ... >>> note: keeping build directory `/tmp/guix-build-gnupg-2.1.11.drv-0' >>> builder for

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Leo Famulari
On Mon, Feb 29, 2016 at 12:10:33PM -0800, Christopher Allan Webber wrote: > See: https://lwn.net/Articles/677914/ > > > Package: pillow > > CVE ID : CVE-2016-0740 CVE-2016-0775 CVE-2016-2533 > > > > Multiple security vulnerabilities have been found in Pillow, a Python > >

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
See: https://lwn.net/Articles/677914/ > Package: pillow > CVE ID : CVE-2016-0740 CVE-2016-0775 CVE-2016-2533 > > Multiple security vulnerabilities have been found in Pillow, a Python > imaging library, which may result in denial of service or the execution > of arbitrary code if

bug#22695: Binary Installation bugs and suggestions

2016-02-29 Thread Ludovic Courtès
Commit c8e26887eda99d1cd7b89772ff642854a6b78ebd incorporates your suggestions; closing this bug.. Thanks again! Ludo’.

bug#22565: Cannot talk to upowerd over D-Bus

2016-02-29 Thread Ludovic Courtès
Ricardo Wurmus skribis: > Ludovic Courtès writes: > >> Ricardo Wurmus skribis: >> >>> I’m trying to figure out why we cannot use the Xfce menu to shut down or >>> reboot, and while doing that I found that >>> >>> loginctl poweroff >>>

bug#22831: OpenSSL should not depend on Perl

2016-02-29 Thread Leo Famulari
On Sun, Feb 28, 2016 at 02:37:54PM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > > On Sat, Feb 27, 2016 at 06:05:29PM +0100, Ludovic Courtès wrote: > >> Commit 784d6e91 changed OpenSSL such that it does not depend on Perl, > >> but one of the subsequent upgrades

bug#22049: libreoffice compile error

2016-02-29 Thread Leo Famulari
On Mon, Feb 29, 2016 at 03:35:40AM -0500, Leo Famulari wrote: > On Sun, Feb 28, 2016 at 07:06:22PM +0100, Ludovic Courtès wrote: > > Leo Famulari skribis: > > > It looks like the problem is with a libreoffice dependency, ilmbase. > > > Looking at the build history on

bug#22049: libreoffice compile error

2016-02-29 Thread Leo Famulari
On Sun, Feb 28, 2016 at 07:06:22PM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > It looks like the problem is with a libreoffice dependency, ilmbase. > > Looking at the build history on hydra.gnu.org, it hasn't built > > successfully since at least 2015-02-25: > >