GNU bug report logs - #33925
Qt 5.11.3 bug-fix update

Previous Next

Package: guix;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Sun, 30 Dec 2018 18:30:02 UTC

Severity: normal

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 33925 in the body.
You can then email your comments to 33925 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-guix <at> gnu.org:
bug#33925; Package guix. (Sun, 30 Dec 2018 18:30:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Leo Famulari <leo <at> famulari.name>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Sun, 30 Dec 2018 18:30:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: bug-guix <at> gnu.org
Subject: Qt 5.11.3 bug-fix update
Date: Sun, 30 Dec 2018 13:29:11 -0500
[Message part 1 (text/plain, inline)]
There is a new release of Qt, 5.11.3, which is strictly a bug-fix
release:

https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

It includes several important security-related fixes.

We should try updating it.

`guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
Maybe we can do the work on a special 'qt-updates' branch.

Would anyone like to lead this work?
[signature.asc (application/pgp-signature, inline)]

Information forwarded to bug-guix <at> gnu.org:
bug#33925; Package guix. (Mon, 31 Dec 2018 18:45:01 GMT) Full text and rfc822 format available.

Message #8 received at 33925 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: Leo Famulari <leo <at> famulari.name>
Cc: 33925 <at> debbugs.gnu.org
Subject: Re: bug#33925: Qt 5.11.3 bug-fix update
Date: Mon, 31 Dec 2018 20:44:01 +0200
[Message part 1 (text/plain, inline)]
On Sun, Dec 30, 2018 at 01:29:11PM -0500, Leo Famulari wrote:
> There is a new release of Qt, 5.11.3, which is strictly a bug-fix
> release:
> 
> https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
> 
> It includes several important security-related fixes.
> 
> We should try updating it.
> 
> `guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
> Maybe we can do the work on a special 'qt-updates' branch.
> 
> Would anyone like to lead this work?

I normally end up doing the qt updates. my work flow is to download the
md5sum file and use grep, awk or parallel, and aria2 to download the files.
After updating all the qt packages building them all (and qtwebkit)
takes hours, and then another day or two to fix build/test errors. If
you check, for example, the source for qtscript¹, it has barely changed
in the past year, so most of the updates are fairly straightforward.

Of course the fun part is figuring out all the dependant packages and
why they suddenly fail.

¹https://code.qt.io/cgit/qt/qtscript.git/log/


-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
[signature.asc (application/pgp-signature, inline)]

Information forwarded to bug-guix <at> gnu.org:
bug#33925; Package guix. (Wed, 02 Jan 2019 13:47:02 GMT) Full text and rfc822 format available.

Message #11 received at 33925 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: Leo Famulari <leo <at> famulari.name>
Cc: 33925 <at> debbugs.gnu.org
Subject: Re: bug#33925: Qt 5.11.3 bug-fix update
Date: Wed, 2 Jan 2019 15:46:38 +0200
[Message part 1 (text/plain, inline)]
On Mon, Dec 31, 2018 at 08:44:01PM +0200, Efraim Flashner wrote:
> On Sun, Dec 30, 2018 at 01:29:11PM -0500, Leo Famulari wrote:
> > There is a new release of Qt, 5.11.3, which is strictly a bug-fix
> > release:
> > 
> > https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
> > 
> > It includes several important security-related fixes.
> > 
> > We should try updating it.
> > 
> > `guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
> > Maybe we can do the work on a special 'qt-updates' branch.
> > 
> > Would anyone like to lead this work?
> 
I started the update process. qt, qt-modular, python-sip, pyqt-5 and
qscintilla are updated on the qt-updates branch. I tested python-qscintilla
with python-pyqt-without-qtwebkit. Qtwebkit is still untested, as are
all the packages which depend on them.


-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
[signature.asc (application/pgp-signature, inline)]

Reply sent to Leo Famulari <leo <at> famulari.name>:
You have taken responsibility. (Mon, 25 Feb 2019 23:44:01 GMT) Full text and rfc822 format available.

Notification sent to Leo Famulari <leo <at> famulari.name>:
bug acknowledged by developer. (Mon, 25 Feb 2019 23:44:02 GMT) Full text and rfc822 format available.

Message #16 received at 33925-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
Cc: 33925-done <at> debbugs.gnu.org
Subject: Re: bug#33925: Qt 5.11.3 bug-fix update
Date: Mon, 25 Feb 2019 18:43:32 -0500
[Message part 1 (text/plain, inline)]
Qt was updated to 5.11.3 in commit
c82cd3a7bd5d7a85fb48a37c3a5e37fbe3ed6738. Thanks Efraim!
[signature.asc (application/pgp-signature, inline)]

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Tue, 26 Mar 2019 11:24:05 GMT) Full text and rfc822 format available.

This bug report was last modified 5 years and 26 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.