GNU bug report logs - #55990
[PATCH staging/core-updates] gnu: nss, nss-certs: Update to 3.78.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 55990 in the body.
You can then email your comments to 55990 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: John Kehayias <john.kehayias <at> protonmail.com>
To: Guix-patches <guix-patches <at> gnu.org>
Subject: [PATCH staging/core-updates]  gnu: nss, nss-certs: Update to 3.78.
Date: Wed, 15 Jun 2022 03:44:08 +0000

[Message part 1 (text/plain, inline)]

Hi Guix,

Over on IRC justkdng reported that nss was out of date: we have 3.72 and latest is 3.78. Well, there are sources for 3.79 but Mozilla says 3.78 is latest: https://firefox-source-docs.mozilla.org/security/nss/releases/index.html#mozilla-projects-nss-releases (and 3.79 failed to build for me...).

Part of the reason may be that guix refresh doesn't pick up a new version and says 3.72 is the latest. I did not investigate, but just noting it.

Attached is a patch to update nss and nss-certs to 3.78. I tested that they build on x86_64, including tests.

Since

$ guix refresh nss -l
Building the following 737 packages would ensure 1820 dependent packages are rebuilt...

I would guess this goes into either staging or core-updates, whatever will be merged next?

John

[0001-gnu-nss-nss-certs-Update-to-3.78.patch (text/x-patch, attachment)]

Message #8 received at 55990 <at> debbugs.gnu.org (full text, mbox):

From: Liliana Marie Prikler <liliana.prikler <at> ist.tugraz.at>
To: John Kehayias <john.kehayias <at> protonmail.com>, 55990 <at> debbugs.gnu.org
Subject: Re: [PATCH staging/core-updates]  gnu: nss, nss-certs: Update to 3.78.
Date: Wed, 15 Jun 2022 11:19:09 +0200

Am Mittwoch, dem 15.06.2022 um 03:44 +0000 schrieb John Kehayias:
> $ guix refresh nss -l
> Building the following 737 packages would ensure 1820 dependent
> packages are rebuilt...
1820 is core-updates material, but note that nss-certs has "only" 622
rebuilds.  Note that both should be grafted on master due to their
security relevance.

Also,
> Subject: [PATCH] gnu: nss, nss-certs: Update to 3.78.
> 
> * gnu/packages/nss.scm (nss): Update to 3.78.
> * gnu/packages/certs.scm (nss-certs): Likewise.
One package per patch, these are not linked.

Cheers

Message #13 received at 55990-done <at> debbugs.gnu.org (full text, mbox):

From: John Kehayias <john.kehayias <at> protonmail.com>
To: Liliana Marie Prikler <liliana.prikler <at> ist.tugraz.at>
Cc: 55990-done <at> debbugs.gnu.org
Subject: Re: [PATCH staging/core-updates]  gnu: nss, nss-certs: Update to 3.78.
Date: Mon, 29 Aug 2022 20:05:16 +0000

Hello,


On Wed, Jun 15, 2022 at 11:19 AM, Liliana Marie Prikler wrote:

> Am Mittwoch, dem 15.06.2022 um 03:44 +0000 schrieb John Kehayias:
>> $ guix refresh nss -l
>> Building the following 737 packages would ensure 1820 dependent
>> packages are rebuilt...
> 1820 is core-updates material, but note that nss-certs has "only" 622
> rebuilds.  Note that both should be grafted on master due to their
> security relevance.
>

Yes, you are right, sorry I missed that. But this has been supplanted by newer updates on the staging branch already. Closing.

> Also,
>> Subject: [PATCH] gnu: nss, nss-certs: Update to 3.78.
>>
>> * gnu/packages/nss.scm (nss): Update to 3.78.
>> * gnu/packages/certs.scm (nss-certs): Likewise.
> One package per patch, these are not linked.
>
> Cheers

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.