Re: GNOME 3.34 in GNU Guix and security

2021-03-19 Thread Guillaume Le Vaillant
Danny Milosavljevic skribis: > Hello, > > core-updates is still in a pretty bad state. > > [...] > > A short summary of what is at least broken: > > [...] > (2) Source files have been in-place replaced upstream with a lot of packages > (see my bug report about the topic). fldigi has such a

Re: GNOME 3.34 in GNU Guix and security

2021-03-18 Thread Ricardo Wurmus
Hi Danny, > (3) libusb-for-axoloti build failure (guix build axoloti-patcher-next) This has been fixed in 1daedaa8646696783c88553e03035d547fd001ca. > (5) download failed > "https://bioconductor.org/packages/release/bioc/src/contrib/DelayedArray_0.16.1.tar.gz; > 404 "Not Found" This was fixed

Re: GNOME 3.34 in GNU Guix and security

2021-03-18 Thread Danny Milosavljevic
Hello, core-updates is still in a pretty bad state. I'd be glad to merge Raghav's patches (which he already reworked to be current for core-updates!) to core-updates--but right now, Guix packages don't build BEFORE or after applying these patches to core-updates. Please, let's do something

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Raghav Gururajan
Hi Ricardo! Thanks for the update! Also, then reason GNOME work got messed up is that, in wip-desktop, [1] I was not just working gnome packages, but also its dependencies [2] Work involved not just updates, but also improvements. This kinda complicated the "update stuff" norm. I think

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Ricardo Wurmus
Raghav Gururajan writes: > Hi Ricardo! > >> I don’t know if anyone is working on it right now, though. I was told >> months ago that Raghav Gururajan was working on GNOME upgrades as part >> of the wip-desktop branch, but my occasional questions for a status >> upgrade have gone unanswered.

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Léo Le Bouter
On Thu, 2021-03-11 at 03:18 -0500, Mark H Weaver wrote: > Hi Léo, Hello! > I appreciate your recent work on Guix security. Thank you for that. Very happy to catch up there as well for my own usage of GNU Guix as well! > Can you please substantiate this? What vulnerabilities do you know > of,

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Jonathan Brielmaier
Am 11.03.21 um 09:08 schrieb Ricardo Wurmus: Léo Le Bouter writes: I must come to the conclusion that using GNOME 3.34 in GNU Guix right now is just straight out insecure. I would advise we either, get rid of GNOME, backport all individual security patches (they can be numerous..), or

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Raghav Gururajan
Hi Ricardo! I don’t know if anyone is working on it right now, though. I was told months ago that Raghav Gururajan was working on GNOME upgrades as part of the wip-desktop branch, but my occasional questions for a status upgrade have gone unanswered. Raghav, please correct me if I’m mistaken.

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Mark H Weaver
Hi Léo, I appreciate your recent work on Guix security. Thank you for that. Léo Le Bouter writes: > I must come to the conclusion that using GNOME 3.34 in GNU Guix right > now is just straight out insecure. I would advise we either, get rid of > GNOME, backport all individual security patches

Re: GNOME 3.34 in GNU Guix and security

2021-03-11 Thread Ricardo Wurmus
Léo Le Bouter writes: > I must come to the conclusion that using GNOME 3.34 in GNU Guix right > now is just straight out insecure. I would advise we either, get rid of > GNOME, backport all individual security patches (they can be > numerous..), or upgrade GNOME to latest and keep up over