GNU bug report logs - #35512
[PATCH 0/1] gnu: emacs: Add mailutils to inputs for security.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 35512 in the body.
You can then email your comments to 35512 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: wednesday <jessejohngildersleve <at> zohomail.eu>
To: guix-patches <at> gnu.org
Cc: wednesday <jessejohngildersleve <at> zohomail.eu>
Subject: [PATCH 0/1] gnu: emacs: Add mailutils to inputs for security.
Date: Tue, 30 Apr 2019 22:41:40 +0100

If mailutils is not present on the system, then emacs will fall back to using
it's own limited version of movemail that retrieves POP3 only from insecure channels..
This link explains some more details:
https://bugs.launchpad.net/ubuntu/+source/emacs/+bug/1814179

wednesday (1):
  gnu: emacs: Add mailutils to inputs.

 gnu/packages/emacs.scm | 3 +++
 1 file changed, 3 insertions(+)

-- 
2.21.0

Message #8 received at 35512 <at> debbugs.gnu.org (full text, mbox):

From: wednesday <jessejohngildersleve <at> zohomail.eu>
To: 35512 <at> debbugs.gnu.org
Cc: wednesday <jessejohngildersleve <at> zohomail.eu>
Subject: [PATCH 1/1] gnu: emacs: Add mailutils to inputs.
Date: Tue, 30 Apr 2019 22:43:45 +0100

* gnu/packages/emacs.scm (emacs)[inputs]: Add mailutils to replace insecure
  built-in movemail.
---
 gnu/packages/emacs.scm | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/gnu/packages/emacs.scm b/gnu/packages/emacs.scm
index 7c60cc6021..a5e7000468 100644
--- a/gnu/packages/emacs.scm
+++ b/gnu/packages/emacs.scm
@@ -16,6 +16,7 @@
 ;;; Copyright © 2018 Efraim Flashner <efraim <at> flashner.co.il>
 ;;; Copyright © 2018 Mathieu Othacehe <m.othacehe <at> gmail.com>
 ;;; Copyright © 2018 Tobias Geerinckx-Rice <me <at> tobias.gr>
+;;; Copyright © 2019 Jesse John Gildersleve <jessejohngildersleve <at> zohomail.eu>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -55,6 +56,7 @@
   #:use-module (gnu packages image)
   #:use-module (gnu packages imagemagick)
   #:use-module (gnu packages linux) ; alsa-lib
+  #:use-module (gnu packages mail) ; for mailutils
   #:use-module (gnu packages ncurses)
   #:use-module (gnu packages pkg-config)
   #:use-module (gnu packages texinfo)
@@ -146,6 +148,7 @@
        ("ncurses" ,ncurses)
 
        ;; TODO: Add the optional dependencies.
+       ("mailutils" ,mailutils)
        ("libx11" ,libx11)
        ("gtk+" ,gtk+)
        ("libxft" ,libxft)
-- 
2.21.0

Message #13 received at 35512-done <at> debbugs.gnu.org (full text, mbox):

From: Tobias Geerinckx-Rice <me <at> tobias.gr>
To: 35512-done <at> debbugs.gnu.org, wednesday <jessejohngildersleve <at> zohomail.eu>
Subject: Re: [bug#35512] [PATCH 0/1] gnu: emacs: Add mailutils to inputs for
 security.
Date: Sat, 12 Oct 2019 16:46:10 +0200

[Message part 1 (text/plain, inline)]

Wednesday,

wednesday 写道：
> If mailutils is not present on the system, then emacs will fall 
> back to using
> it's own limited version of movemail that retrieves POP3 only 
> from insecure channels..
> This link explains some more details:
> https://bugs.launchpad.net/ubuntu/+source/emacs/+bug/1814179

Thank you for the patch and the clear explanation.  Sorry it 
languished for so long.

Pushed as 5ce153b1106fe44a9910d08663b4b9cd2a27b2d6, with the 
comment moved from the commit message to the code.

Kind regards,

T G-R

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.