GNU logs - #74335, boring messages

Message sent to guix-patches@HIDDEN:

Subject: [bug#74335] [PATCH 0/4] [security] Remove allegro-4.
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Wed, 13 Nov 2024 08:51:02 +0000
Resent-Message-ID: <handler.74335.B.173148780812050 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74335 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves@HIDDEN>
From: Nicolas Graves <ngraves@HIDDEN>
Date: Wed, 13 Nov 2024 09:47:41 +0100
Message-ID: <20241113084948.19059-1-ngraves@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=188.165.33.112; envelope-from=ngraves@HIDDEN;
 helo=8.mo584.mail-out.ovh.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

This package has a CVE, and its development is not supported upstream
anymore.  

Nicolas Graves (4):
  gnu: libresprite: Update to 1.1.
  gnu: Remove aseprite.
  gnu: Remove dumb-allegro4.
  gnu: Remove allegro-4.

 gnu/packages/game-development.scm | 146 ++++++------------------------
 gnu/packages/music.scm            |  12 ---
 2 files changed, 27 insertions(+), 131 deletions(-)

-- 
2.46.0

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Nicolas Graves <ngraves@HIDDEN>
Subject: bug#74335: Acknowledgement ([PATCH 0/4] [security] Remove allegro-4.)
Message-ID: <handler.74335.B.173148780812050.ack <at> debbugs.gnu.org>
References: <20241113084948.19059-1-ngraves@HIDDEN>
X-Gnu-PR-Message: ack 74335
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Reply-To: 74335 <at> debbugs.gnu.org
Date: Wed, 13 Nov 2024 08:51:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 guix-patches@HIDDEN

If you wish to submit further information on this problem, please
send it to 74335 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
74335: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D74335
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to guix-patches@HIDDEN:

Subject: [bug#74335] [PATCH v1 1/4] gnu: libresprite: Update to 1.1.
References: <20241113084948.19059-1-ngraves@HIDDEN>
In-Reply-To: <20241113084948.19059-1-ngraves@HIDDEN>
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Wed, 13 Nov 2024 09:06:02 +0000
Resent-Message-ID: <handler.74335.B74335.173148871414654 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74335 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves@HIDDEN>
From: Nicolas Graves <ngraves@HIDDEN>
Date: Wed, 13 Nov 2024 10:05:00 +0100
Message-ID: <20241113090506.21471-1-ngraves@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

* gnu/packages/game-development.scm (libresprite): Update to 1.1.
[arguments]: Improve style: use gexps.
[native-inputs]: Improve style: use list.
[inputs]: Improve style: use list.  Add libarchive.  Delete zlib.
Replace tinyxml by tinyxml2.
---
 gnu/packages/game-development.scm | 53 ++++++++++++++++---------------
 1 file changed, 27 insertions(+), 26 deletions(-)

diff --git a/gnu/packages/game-development.scm b/gnu/packages/game-development.scm
index 89c6c0b75e..4d3f73c44c 100644
--- a/gnu/packages/game-development.scm
+++ b/gnu/packages/game-development.scm
@@ -66,6 +66,7 @@ (define-module (gnu packages game-development)
   #:use-module (gnu packages assembly)
   #:use-module (gnu packages audio)
   #:use-module (gnu packages autotools)
+  #:use-module (gnu packages backup)
   #:use-module (gnu packages base)
   #:use-module (gnu packages bash)
   #:use-module (gnu packages bison)
@@ -1194,7 +1195,7 @@ (define-public aseprite
 (define-public libresprite
   (package
     (name "libresprite")
-    (version "1.0")
+    (version "1.1")
     ;; TODO: Unbundle third party software.
     ;; - duktape is bundled inside the project but it's hard to unbundle:
     ;;   there are many differences from a version to the next and it is not
@@ -1208,34 +1209,34 @@ (define-public libresprite
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "0djbjjh21ahlxzh0b0jp4mpfycam8h9157i4wbxkd618fraadhbp"))))
+                "0i1g730khnb8xj56c07x0b0ni6sx4n8vp3w13yazqx9anj23y856"))))
     (build-system cmake-build-system)
     (arguments
-     '(#:configure-flags
-       (list "-DWITH_WEBP_SUPPORT=1"
-             "-DWITH_DESKTOP_INTEGRATION=1")
-       ;; Tests are unmaintained
-       #:tests? #f))
-    (native-inputs
-     `(("pkg-config" ,pkg-config)))
+     (list #:configure-flags
+           #~(list "-DWITH_WEBP_SUPPORT=1"
+                   "-DWITH_DESKTOP_INTEGRATION=1")
+           ;; Tests are unmaintained
+           #:tests? #f))
+    (native-inputs (list pkg-config))
     (inputs
-     `(("curl" ,curl)
-       ("freetype" ,freetype)
-       ("giflib" ,giflib)
-       ("googletest" ,googletest)
-       ("libjpeg" ,libjpeg-turbo)
-       ("libpng" ,libpng)
-       ("libwebp" ,libwebp)
-       ("libx11" ,libx11)
-       ("libxext" ,libxext)
-       ("libxxf86dga" ,libxxf86dga)
-       ("libxxf86vm" ,libxxf86vm)
-       ("lua" ,lua)                     ; Optional
-       ("pixman" ,pixman)
-       ("sdl2" ,sdl2)
-       ("sdl2-image" ,sdl2-image)
-       ("tinyxml" ,tinyxml)
-       ("zlib" ,zlib)))
+     (list curl
+           freetype
+           giflib
+           googletest
+           libarchive
+           libjpeg-turbo
+           libpng
+           libwebp
+           libx11
+           libxext
+           libxxf86dga
+           libxxf86vm
+           lua  ;optional
+           pixman
+           sdl2
+           sdl2-image
+           tinyxml2
+           zlib))
     (synopsis "Animated sprite editor and pixel art tool")
     (description "LibreSprite is a tool for creating 2D pixel art for video
 games.  In addition to basic pixel editing features, it can assist in the
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

Subject: [bug#74335] [PATCH v1 2/4] gnu: Remove aseprite.
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Wed, 13 Nov 2024 09:06:02 +0000
Resent-Message-ID: <handler.74335.B74335.173148871814900 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 74335 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves@HIDDEN>
From: Nicolas Graves <ngraves@HIDDEN>
Date: Wed, 13 Nov 2024 10:05:01 +0100
Message-ID: <20241113090506.21471-2-ngraves@HIDDEN>
In-Reply-To: <20241113090506.21471-1-ngraves@HIDDEN>
References: <20241113090506.21471-1-ngraves@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

This package is a last GPL2 revision of a package that is now
distributed in a nonfree license.  We already have its libre fork in
Guix, and it depends on allegro-4, which has a CVE and which
development is not supported upstream.

* gnu/packages/game-development.scm (aseprite): Delete variable.
---
 gnu/packages/game-development.scm | 59 -------------------------------
 1 file changed, 59 deletions(-)

diff --git a/gnu/packages/game-development.scm b/gnu/packages/game-development.scm
index 4d3f73c44c..0ca08d5149 100644
--- a/gnu/packages/game-development.scm
+++ b/gnu/packages/game-development.scm
@@ -1133,65 +1133,6 @@ (define-public allegro
     (home-page "https://liballeg.org")
     (license license:bsd-3)))
 
-(define-public aseprite
-  (package
-    (name "aseprite")
-    (version "1.1.7") ; After 1.1.7 the source is no longer distributed under the GPL.
-    ;; TODO: Unbundle third party software.
-    (source (origin
-              (method url-fetch/zipbomb)
-              (uri (string-append "https://github.com/aseprite/aseprite"
-                                  "/releases/download/v" version
-                                  "/Aseprite-v" version "-Source.zip"))
-              (sha256
-               (base32
-                "1plss4i1lfxcznv9p0pip1bkhj7ipw7jlhsh5avd6dzw079l4nvv"))))
-    (build-system cmake-build-system)
-    (arguments
-     '(#:configure-flags
-       ;; Use shared libraries instead of building bundled source.
-       (list "-DWITH_WEBP_SUPPORT=1"
-             "-DUSE_SHARED_CURL=1"
-             "-DUSE_SHARED_GIFLIB=1"
-             "-DUSE_SHARED_JPEGLIB=1"
-             "-DUSE_SHARED_ZLIB=1"
-             "-DUSE_SHARED_LIBPNG=1"
-             "-DUSE_SHARED_LIBLOADPNG=1"
-             "-DUSE_SHARED_LIBWEBP=1"
-             "-DUSE_SHARED_TINYXML=1"
-             "-DUSE_SHARED_PIXMAN=1"
-             "-DUSE_SHARED_FREETYPE=1"
-             "-DUSE_SHARED_ALLEGRO4=1"
-             "-DENABLE_UPDATER=0" ; no auto-updates
-             (string-append "-DFREETYPE_INCLUDE_DIR="
-                            (assoc-ref %build-inputs "freetype")
-                            "/include/freetype2"))))
-    (native-inputs
-     (list pkg-config))
-    ;; TODO: Use a patched Allegro 4 that supports window resizing.  This
-    ;; patched version is bundled with Aseprite, but the patches should be
-    ;; extracted and applied on top of a standalone Allegro 4 package.
-    (inputs
-     `(("allegro" ,allegro-4)
-       ("curl" ,curl)
-       ("freetype" ,freetype)
-       ("giflib" ,giflib)
-       ("libjpeg" ,libjpeg-turbo)
-       ("libpng" ,libpng)
-       ("libwebp" ,libwebp)
-       ("libx11" ,libx11)
-       ("libxext" ,libxext)
-       ("libxxf86vm" ,libxxf86vm)
-       ("pixman" ,pixman)
-       ("tinyxml" ,tinyxml)
-       ("zlib" ,zlib)))
-    (synopsis "Animated sprite editor and pixel art tool")
-    (description "Aseprite is a tool for creating 2D pixel art for video
-games.  In addition to basic pixel editing features, Aseprite can assist in
-the creation of animations, tiled graphics, texture atlases, and more.")
-    (home-page "https://www.aseprite.org/")
-    (license license:gpl2+)))
-
 (define-public libresprite
   (package
     (name "libresprite")
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#74335] [PATCH v1 3/4] gnu: Remove dumb-allegro4.
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Wed, 13 Nov 2024 09:06:03 +0000
Resent-Message-ID: <handler.74335.B74335.173148872514921 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 74335
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 74335 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves@HIDDEN>
Received: via spool by 74335-submit <at> debbugs.gnu.org id=B74335.173148872514921
          (code B ref 74335); Wed, 13 Nov 2024 09:06:03 +0000
Received: (at 74335) by debbugs.gnu.org; 13 Nov 2024 09:05:25 +0000
Received: from localhost ([127.0.0.1]:40714 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tB9JU-0003sZ-Bg
	for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 04:05:24 -0500
Received: from 16.mo584.mail-out.ovh.net ([188.165.55.104]:45075)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ngraves@HIDDEN>) id 1tB9JS-0003sP-JS
 for 74335 <at> debbugs.gnu.org; Wed, 13 Nov 2024 04:05:23 -0500
Received: from director4.ghost.mail-out.ovh.net (unknown [10.109.140.35])
 by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XpHS053NMz10Yv
 for <74335 <at> debbugs.gnu.org>; Wed, 13 Nov 2024 09:05:20 +0000 (UTC)
Received: from ghost-submission-5b5ff79f4f-5xq59 (unknown [10.110.178.52])
 by director4.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 40C451FEB3;
 Wed, 13 Nov 2024 09:05:20 +0000 (UTC)
Received: from ngraves.fr ([37.59.142.105])
 by ghost-submission-5b5ff79f4f-5xq59 with ESMTPSA
 id gwnBBtBrNGfUAAAAlHkLOg
 (envelope-from <ngraves@HIDDEN>); Wed, 13 Nov 2024 09:05:20 +0000
Authentication-Results: garm.ovh; auth=pass
 (GARM-105G006198829be-2151-4aa4-aae3-d5505e3b6669,
 E46EE4CFA6AA1EB3B0ED220F39F6A53F8FAC1481) smtp.auth=ngraves@HIDDEN
X-OVh-ClientIp: 90.92.117.144
From: Nicolas Graves <ngraves@HIDDEN>
Date: Wed, 13 Nov 2024 10:05:02 +0100
Message-ID: <20241113090506.21471-3-ngraves@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20241113090506.21471-1-ngraves@HIDDEN>
References: <20241113090506.21471-1-ngraves@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 7768709358023402210
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudelgddvfecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeelffejteeutefhfeekfffffedvudekjeekgfeludeitdfhkeevhfeivdfhffeggeenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddruddtheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegfeefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgegmpdhmohguvgepshhmthhpohhuth
DKIM-Signature: a=rsa-sha256; bh=07d002A9MkL9aJ7Il84avo0SeuGS/8PV4r97yogJNjg=; 
 c=relaxed/relaxed; d=ngraves.fr; h=From;
 s=ovhmo4487190-selector1; t=1731488720; v=1;
 b=wGhNq2VzBkrvjqARTFZYt7HkV4ZKGBnXCK6bFLhUxfUg04scUPI8x1eoGxKUpVMfKUC3LVw3
 /z+5Zehh3/smoPEbDa+lDcYCyet1RkpmWDEocyatg6ahUjca1PNRrNPR8UsZY+p10i/SKKQpHTf
 uR+qaME1ypYsJ4sr6duPot5iJ7U6t8gy+UM16q4e92QkBDeZ7gXdKUx1WbA8oM/1FsFQi3O0j9q
 6PcqGVGvIvXYrzUR2qwnkxWtgCEraLHWMw7QhCQr229jDr0LpmVpJHxDaWvoi4fGIoqSZgHoEcZ
 Qe4876iTc5M95zrnjpZIUmw++Rmx5raTf7K6LehZ5LiMw==
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

This package is leaf package that depends on allegro4, which has a CVE
and which development is not supported upstream anymore.

* gnu/packages/music.scm (dumb-allegro4): Delete variable.
---
 gnu/packages/music.scm | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/gnu/packages/music.scm b/gnu/packages/music.scm
index 980bce6b30..aec13b25a4 100644
--- a/gnu/packages/music.scm
+++ b/gnu/packages/music.scm
@@ -130,7 +130,6 @@ (define-module (gnu packages music)
   #:use-module (gnu packages fonts)
   #:use-module (gnu packages fontutils)
   #:use-module (gnu packages freedesktop)
-  #:use-module (gnu packages game-development)
   #:use-module (gnu packages gcc)
   #:use-module (gnu packages gettext)
   #:use-module (gnu packages ghostscript)
@@ -985,17 +984,6 @@ (define-public dumb
     ;; Therefore, the DUMB license may be considered a free software license.
     (license (license:fsf-free "file://LICENSE"))))
 
-(define-public dumb-allegro4
-  (package
-    (inherit dumb)
-    (name "dumb-allegro4")
-    (arguments
-     (substitute-keyword-arguments (package-arguments dumb)
-       ((#:configure-flags flags)
-        `(cons "-DBUILD_ALLEGRO4=ON" ,(delete "-DBUILD_ALLEGRO4=OFF" flags)))))
-    (inputs
-     (list allegro-4))))
-
 (define-public hydrogen
   (package
     (name "hydrogen")
-- 
2.46.0

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#74335] [PATCH v1 4/4] gnu: Remove allegro-4.
Resent-From: Nicolas Graves <ngraves@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Wed, 13 Nov 2024 09:06:03 +0000
Resent-Message-ID: <handler.74335.B74335.173148872814940 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 74335
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 74335 <at> debbugs.gnu.org
Cc: Nicolas Graves <ngraves@HIDDEN>
Received: via spool by 74335-submit <at> debbugs.gnu.org id=B74335.173148872814940
          (code B ref 74335); Wed, 13 Nov 2024 09:06:03 +0000
Received: (at 74335) by debbugs.gnu.org; 13 Nov 2024 09:05:28 +0000
Received: from localhost ([127.0.0.1]:40718 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tB9JX-0003st-TN
	for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 04:05:28 -0500
Received: from 3.mo561.mail-out.ovh.net ([46.105.44.175]:57231)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ngraves@HIDDEN>) id 1tB9JV-0003sa-EH
 for 74335 <at> debbugs.gnu.org; Wed, 13 Nov 2024 04:05:26 -0500
Received: from director9.ghost.mail-out.ovh.net (unknown [10.108.2.12])
 by mo561.mail-out.ovh.net (Postfix) with ESMTP id 4XpHS40j2kz1S6c
 for <74335 <at> debbugs.gnu.org>; Wed, 13 Nov 2024 09:05:23 +0000 (UTC)
Received: from ghost-submission-5b5ff79f4f-r85k8 (unknown [10.110.96.35])
 by director9.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 81A261FD45;
 Wed, 13 Nov 2024 09:05:23 +0000 (UTC)
Received: from ngraves.fr ([37.59.142.102])
 by ghost-submission-5b5ff79f4f-r85k8 with ESMTPSA
 id XREqF9NrNGfPiwAACFp0+g
 (envelope-from <ngraves@HIDDEN>); Wed, 13 Nov 2024 09:05:23 +0000
Authentication-Results: garm.ovh; auth=pass
 (GARM-102R004d73648d1-416e-48cc-8df8-1d465f40e83a,
 E46EE4CFA6AA1EB3B0ED220F39F6A53F8FAC1481) smtp.auth=ngraves@HIDDEN
X-OVh-ClientIp: 90.92.117.144
From: Nicolas Graves <ngraves@HIDDEN>
Date: Wed, 13 Nov 2024 10:05:03 +0100
Message-ID: <20241113090506.21471-4-ngraves@HIDDEN>
X-Mailer: git-send-email 2.46.0
In-Reply-To: <20241113090506.21471-1-ngraves@HIDDEN>
References: <20241113090506.21471-1-ngraves@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 7769553785266823906
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudelgddvfecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgjfhgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekueehueevffefteffffdtfeehgfehveetgfehhfekffetvdettdejhefhffetleenucffohhmrghinhepghhithhhuhgsrdgtohhmpdhlihgsrghllhgvghdrohhrghenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddruddtvdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomhepnhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtohepjeegfeefheesuggvsggsuhhgshdrghhnuhdrohhrghdpoffvtefjohhsthepmhhoheeiudgmpdhmohguvgepshhmthhpohhuth
DKIM-Signature: a=rsa-sha256; bh=R0XGf2hWBOsK9pstmUjayO6l0YZZZ7rh509j4mmX2bA=; 
 c=relaxed/relaxed; d=ngraves.fr; h=From;
 s=ovhmo4487190-selector1; t=1731488724; v=1;
 b=ps5i9NL5KCVjl4bdpw7hE4f+ytA5DI9Pwg2zpEGZ7WBZdPD8SWxWW1g9NduYyeBsGBEcWiXD
 L9wWO6Lc8piICTOk4t2y7LTPGjTlQlq9kzkYwXPIWZMheo7Ipzd7GDd71cejeyCVj6dwCnTKj81
 sQ8vBE2hkLhslM9Jct+VGfQwpYoWsRw77rY1lffedc8aCjVD0NFUEiT4DTbtsbvX/FX3OuJQJT/
 d9i+ZqhhCTIWvV6fDYNCsAIImqkE4Gy3Y8U3DE+HQeUN82QDsHKil6BAxPpW28qt3/kPCi3kych
 QUe7c8w+evdQvOQNy2dzY27C9qazVQUkMo+zM5DFXYqWw==
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

This package has a CVE and its development is not supported by
upstream anymore.

* gnu/packages/game-development.scm (allegro-4): Delete variable.
---
 gnu/packages/game-development.scm | 34 -------------------------------
 1 file changed, 34 deletions(-)

diff --git a/gnu/packages/game-development.scm b/gnu/packages/game-development.scm
index 0ca08d5149..c854e533f9 100644
--- a/gnu/packages/game-development.scm
+++ b/gnu/packages/game-development.scm
@@ -1058,40 +1058,6 @@ (define-public love-nuklear
     (home-page "https://github.com/keharriso/love-nuklear/")
     (license license:expat)))
 
-(define-public allegro-4
-  (package
-    (name "allegro")
-    (version "4.4.3.1")
-    (source (origin
-              (method url-fetch)
-              (uri (string-append "https://github.com/liballeg/allegro5/"
-                                  "releases/download/" version "/allegro-"
-                                  version ".tar.gz"))
-              (sha256
-               (base32
-                "1m6lz35nk07dli26kkwz3wa50jsrxs1kb6w1nj14a911l34xn6gc"))))
-    (build-system cmake-build-system)
-    (arguments
-     '(#:phases
-       (modify-phases %standard-phases
-         (add-after 'unpack 'patch-build-system
-           (lambda _
-             ;; Build addons as shared libraries.  Trying to set ADDON_LINKAGE
-             ;; via a command line option doesn't work because it is
-             ;; unconditionally clobbered in the build script.
-             (substitute* '("CMakeLists.txt")
-               (("ADDON_LINKAGE STATIC")
-                "ADDON_LINKAGE SHARED")))))))
-    (inputs
-     (list glu libpng libvorbis mesa zlib))
-    (synopsis "Game programming library")
-    (description "Allegro is a library mainly aimed at video game and
-multimedia programming.  It handles common, low-level tasks such as creating
-windows, accepting user input, loading data, drawing images, playing sounds,
-etc.")
-    (home-page "https://liballeg.org")
-    (license license:giftware)))
-
 (define-public allegro
   (package
     (name "allegro")
-- 
2.46.0

Message sent to Nicolas Graves <ngraves@HIDDEN>:

X-Loop: help-debbugs@HIDDEN
Subject: bug#74335: CVE and removal of allegro-4
Reply-To: Steve George <steve@HIDDEN>, 74335-quiet <at> debbugs.gnu.org
Mail-Followup-To: Steve George <steve@HIDDEN>, 74335-quiet <at> debbugs.gnu.org
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-To: Nicolas Graves <ngraves@HIDDEN>
Resent-Date: Tue, 08 Apr 2025 13:13:03 +0000
Resent-Message-ID: <handler.74335.U74335.174411793723926 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 74335
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 74335-submitter <at> debbugs.gnu.org
Received: via spool by 74335-submitter <at> debbugs.gnu.org id=U74335.174411793723926
          (code U ref 74335); Tue, 08 Apr 2025 13:13:03 +0000
Received: (at 74335-submitter) by debbugs.gnu.org; 8 Apr 2025 13:12:17 +0000
Received: from localhost ([127.0.0.1]:59922 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1u28kT-0006Dp-0C
	for submit <at> debbugs.gnu.org; Tue, 08 Apr 2025 09:12:17 -0400
Received: from mailtransmit05.runbox.com ([2a0c:5a00:149::26]:34340)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <steve@HIDDEN>)
 id 1u28kO-0006Ch-Hd
 for 74335-submitter <at> debbugs.gnu.org; Tue, 08 Apr 2025 09:12:14 -0400
Received: from mailtransmit03.runbox ([10.9.9.163] helo=aibo.runbox.com)
 by mailtransmit05.runbox.com with esmtps (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93)
 (envelope-from <steve@HIDDEN>) id 1u28kF-00EwpV-Mf
 for 74335-submitter <at> debbugs.gnu.org; Tue, 08 Apr 2025 15:12:03 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=futurile.net; s=selector1; h=Content-Type:MIME-Version:Message-ID:Subject:
 To:From:Date; bh=uZ0w8TCZve4tCJHFDSHiOXkaSfT5CPr/FeAfE/3cess=; b=GjUjO1sSLjW7
 Xmeh/2h1Yn6KXAK1DNFBieyQvsly9xw6dCgSwOKMBndRLUVHslJVuqQB+r0EaiznEwgaKJmfv3u1+
 ioeCUDtEB2u41m6bVOX1TTq4M3jFsDJNqEa2r4bCX9+jg4c+OOqqP55xAQx9l/jKe3QtWNEV0Oc8B
 58IW/g9P2Q9TvModMCrUN4jyPprQzFzv3NuPV0g42b3UlKrchs2/C+ZVqgrPKJluQSPSl+SGbXRDp
 ywHkqu271anOq7OTUUEMtNJLwteG9VxtVyYHepTqE7SpqCX7HKqUaHJq4R8942/Nv+q3IL41lU33a
 GWGXRjVqXDN2EhGAzf+hIA==;
Received: from [10.9.9.72] (helo=submission01.runbox)
 by mailtransmit03.runbox with esmtp (Exim 4.86_2)
 (envelope-from <steve@HIDDEN>) id 1u28kE-0000LU-CC
 for 74335-submitter <at> debbugs.gnu.org; Tue, 08 Apr 2025 15:12:02 +0200
Received: by submission01.runbox with esmtpsa [Authenticated ID (641962)]
 (TLS1.2:ECDHE_SECP256R1__RSA_SHA256__AES_256_GCM:256) (Exim 4.93)
 id 1u28k5-00ELno-Li
 for 74335-submitter <at> debbugs.gnu.org; Tue, 08 Apr 2025 15:11:53 +0200
Date: Tue, 8 Apr 2025 14:11:52 +0100
From: Steve George <steve@HIDDEN>
Message-ID: <Z_UgmLBi4SDctuxl@t25sg>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Nicolas,

In #74335 you're removing allegro-4 due to a CVE. Can you specify which CVE it is and add a link to the issue please?

https://debbugs.gnu.org/cgi/bugreport.cgi?bug=74335

According to the manual the package can be removed due to a security issue so it makes sense, but it would be good to record it correctly.

Thanks,

Futurile / Steve

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Andreas Enge <andreas@HIDDEN>
Subject: bug#74335: closed ([PATCH 0/4] [security] Remove allegro-4.)
CC: tracker <at> debbugs.gnu.org
Message-ID: <handler.74335.D74335.17460197541657.ackdone <at> debbugs.gnu.org>
References: <aBIlmnCQAp4qqHrd@jurong>
 <20241113084948.19059-1-ngraves@HIDDEN>
X-Gnu-PR-Message: closed 74335
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Date: Wed, 30 Apr 2025 13:30:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1746019802-1768-0"

This is a multi-part message in MIME format...

------------=_1746019802-1768-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=utf-8

Your message dated Wed, 30 Apr 2025 15:28:58 +0200
with message-id <aBIlmnCQAp4qqHrd@jurong>
and subject line Re: CVE and removal of allegro-4
has caused the debbugs.gnu.org bug report #74335,
regarding [PATCH 0/4] [security] Remove allegro-4.
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@HIDDEN)


--=20
74335: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D74335
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

------------=_1746019802-1768-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by debbugs.gnu.org; 13 Nov 2024 08:50:08 +0000
Received: from localhost ([127.0.0.1]:40681 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tB94i-00038B-7w
	for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 03:50:08 -0500
Received: from lists.gnu.org ([209.51.188.17]:52770)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ngraves@HIDDEN>) id 1tB94g-00036l-84
 for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 03:50:06 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ngraves@HIDDEN>)
 id 1tB94f-0003Ej-81
 for guix-patches@HIDDEN; Wed, 13 Nov 2024 03:50:05 -0500
Received: from 8.mo584.mail-out.ovh.net ([188.165.33.112])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ngraves@HIDDEN>)
 id 1tB94d-0007PW-4q
 for guix-patches@HIDDEN; Wed, 13 Nov 2024 03:50:04 -0500
Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.39])
 by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XpH6H25Pbz1DF3
 for <guix-patches@HIDDEN>; Wed, 13 Nov 2024 08:49:59 +0000 (UTC)
Received: from ghost-submission-5b5ff79f4f-kdlwg (unknown [10.110.96.108])
 by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 62E951FEDE;
 Wed, 13 Nov 2024 08:49:58 +0000 (UTC)
Received: from ngraves.fr ([37.59.142.99])
 by ghost-submission-5b5ff79f4f-kdlwg with ESMTPSA
 id gwd+CTZoNGfnQQAAK0A1cw
 (envelope-from <ngraves@HIDDEN>); Wed, 13 Nov 2024 08:49:58 +0000
Authentication-Results: garm.ovh; auth=pass
 (GARM-99G0033c28a5a8-6a2d-45b1-86b3-806610a15d8e,
 E46EE4CFA6AA1EB3B0ED220F39F6A53F8FAC1481) smtp.auth=ngraves@HIDDEN
X-OVh-ClientIp: 90.92.117.144
From: Nicolas Graves <ngraves@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH 0/4] [security] Remove allegro-4.
Date: Wed, 13 Nov 2024 09:47:41 +0100
Message-ID: <20241113084948.19059-1-ngraves@HIDDEN>
X-Mailer: git-send-email 2.46.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 7509189429804458722
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudelgddvtdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekffegteffgfffjeegjedvfffgtddvueeutefgfeeuvdejgedvgeejjeevueeuveenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddrleelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehguhhigidqphgrthgthhgvshesghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgegmpdhmohguvgepshhmthhpohhuth
DKIM-Signature: a=rsa-sha256; bh=1lwG0HVjPNwYwfDdY5/JcnXtDdh5jxNlhJldx0J3w8E=; 
 c=relaxed/relaxed; d=ngraves.fr; h=From;
 s=ovhmo4487190-selector1; t=1731487799; v=1;
 b=gk1Du0dUMiCuiEM14HTCfAUYgnclwQ0YcWRuUsstvVT0oUILdjFnPuYrWBUeWLqAfzVtIg7/
 8Rm/mAxae/iWu9bQS56izvCt8f1hbzcC4C05bumvTsXPhJHZx1SVlGtCU9UqU//qwZQiyq+hgiW
 xiqNDRkqlOUMA/JYOsE9c5eUksvc/atqRuT74ZLYqTyJRSTmd/1w9zz/DuGrKT3oVt/Xm19RO0o
 YzwRa1AB+mowolYd+dHPfdVzUwMCXpVCj5hcLIysfyyLrjcBLTvZfXn9nWLkkpCiHEoiX0H/ks7
 d/XOrISoZQIgyNcihs/dHre7mqcIrghASnr4SH85JnScw==
Received-SPF: pass client-ip=188.165.33.112; envelope-from=ngraves@HIDDEN;
 helo=8.mo584.mail-out.ovh.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
Cc: Nicolas Graves <ngraves@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

This package has a CVE, and its development is not supported upstream
anymore.  

Nicolas Graves (4):
  gnu: libresprite: Update to 1.1.
  gnu: Remove aseprite.
  gnu: Remove dumb-allegro4.
  gnu: Remove allegro-4.

 gnu/packages/game-development.scm | 146 ++++++------------------------
 gnu/packages/music.scm            |  12 ---
 2 files changed, 27 insertions(+), 131 deletions(-)

-- 
2.46.0




------------=_1746019802-1768-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 74335-done) by debbugs.gnu.org; 30 Apr 2025 13:29:14 +0000
Received: from localhost ([127.0.0.1]:40792 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uA7Uw-0000Qf-D9
	for submit <at> debbugs.gnu.org; Wed, 30 Apr 2025 09:29:14 -0400
Received: from hera.aquilenet.fr ([185.233.100.1]:56974)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <andreas@HIDDEN>)
 id 1uA7Us-0000QJ-Lt; Wed, 30 Apr 2025 09:29:11 -0400
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id A2F62291;
 Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Authentication-Results: hera.aquilenet.fr;
	none
X-Virus-Scanned: Debian amavis at hera.aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavis, port 10024) with ESMTP
 id 7QByot2A62Bc; Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Received: from jurong (176-179-191-150.abo.bbox.fr [176.179.191.150])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 92374105;
 Wed, 30 Apr 2025 15:29:00 +0200 (CEST)
Date: Wed, 30 Apr 2025 15:28:58 +0200
From: Andreas Enge <andreas@HIDDEN>
To: Steve George <steve@HIDDEN>
Subject: Re: CVE and removal of allegro-4
Message-ID: <aBIlmnCQAp4qqHrd@jurong>
References: <Z_UgmLBi4SDctuxl@t25sg>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Z_UgmLBi4SDctuxl@t25sg>
X-Rspamd-Queue-Id: A2F62291
X-Spamd-Result: default: False [5.40 / 15.00]; SPAM_FLAG(5.00)[];
 NEURAL_SPAM(3.00)[1.000]; BAYES_HAM(-3.00)[99.98%];
 MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.10)[text/plain];
 TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+];
 RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2];
 RCPT_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[];
 RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[]
X-Spamd-Bar: +++++
X-Rspamd-Action: greylist
X-Rspamd-Server: hera
X-Spam-Level: *****
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 74335-done
Cc: 74335-done <at> debbugs.gnu.org, 74335-submitter <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hello!

I have not found a CVE number, but the arguments given by Nicolas are
convincing enough for the package removals. I have pushed.

Thanks!

Andreas



------------=_1746019802-1768-0--

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Nicolas Graves <ngraves@HIDDEN>
Subject: bug#74335: closed (Re: CVE and removal of allegro-4)
Message-ID: <handler.74335.D74335.17460197541657.notifdone <at> debbugs.gnu.org>
References: <aBIlmnCQAp4qqHrd@jurong>
 <20241113084948.19059-1-ngraves@HIDDEN>
X-Gnu-PR-Message: they-closed 74335
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Reply-To: 74335 <at> debbugs.gnu.org
Date: Wed, 30 Apr 2025 13:30:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1746019802-1768-1"

This is a multi-part message in MIME format...

------------=_1746019802-1768-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your bug report

#74335: [PATCH 0/4] [security] Remove allegro-4.

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 74335 <at> debbugs.gnu.org.

--=20
74335: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D74335
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

------------=_1746019802-1768-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 74335-done) by debbugs.gnu.org; 30 Apr 2025 13:29:14 +0000
Received: from localhost ([127.0.0.1]:40792 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uA7Uw-0000Qf-D9
	for submit <at> debbugs.gnu.org; Wed, 30 Apr 2025 09:29:14 -0400
Received: from hera.aquilenet.fr ([185.233.100.1]:56974)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <andreas@HIDDEN>)
 id 1uA7Us-0000QJ-Lt; Wed, 30 Apr 2025 09:29:11 -0400
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id A2F62291;
 Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Authentication-Results: hera.aquilenet.fr;
	none
X-Virus-Scanned: Debian amavis at hera.aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavis, port 10024) with ESMTP
 id 7QByot2A62Bc; Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Received: from jurong (176-179-191-150.abo.bbox.fr [176.179.191.150])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 92374105;
 Wed, 30 Apr 2025 15:29:00 +0200 (CEST)
Date: Wed, 30 Apr 2025 15:28:58 +0200
From: Andreas Enge <andreas@HIDDEN>
To: Steve George <steve@HIDDEN>
Subject: Re: CVE and removal of allegro-4
Message-ID: <aBIlmnCQAp4qqHrd@jurong>
References: <Z_UgmLBi4SDctuxl@t25sg>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Z_UgmLBi4SDctuxl@t25sg>
X-Rspamd-Queue-Id: A2F62291
X-Spamd-Result: default: False [5.40 / 15.00]; SPAM_FLAG(5.00)[];
 NEURAL_SPAM(3.00)[1.000]; BAYES_HAM(-3.00)[99.98%];
 MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.10)[text/plain];
 TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+];
 RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2];
 RCPT_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[];
 RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[]
X-Spamd-Bar: +++++
X-Rspamd-Action: greylist
X-Rspamd-Server: hera
X-Spam-Level: *****
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 74335-done
Cc: 74335-done <at> debbugs.gnu.org, 74335-submitter <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hello!

I have not found a CVE number, but the arguments given by Nicolas are
convincing enough for the package removals. I have pushed.

Thanks!

Andreas



------------=_1746019802-1768-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by debbugs.gnu.org; 13 Nov 2024 08:50:08 +0000
Received: from localhost ([127.0.0.1]:40681 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tB94i-00038B-7w
	for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 03:50:08 -0500
Received: from lists.gnu.org ([209.51.188.17]:52770)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ngraves@HIDDEN>) id 1tB94g-00036l-84
 for submit <at> debbugs.gnu.org; Wed, 13 Nov 2024 03:50:06 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ngraves@HIDDEN>)
 id 1tB94f-0003Ej-81
 for guix-patches@HIDDEN; Wed, 13 Nov 2024 03:50:05 -0500
Received: from 8.mo584.mail-out.ovh.net ([188.165.33.112])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ngraves@HIDDEN>)
 id 1tB94d-0007PW-4q
 for guix-patches@HIDDEN; Wed, 13 Nov 2024 03:50:04 -0500
Received: from director10.ghost.mail-out.ovh.net (unknown [10.108.17.39])
 by mo584.mail-out.ovh.net (Postfix) with ESMTP id 4XpH6H25Pbz1DF3
 for <guix-patches@HIDDEN>; Wed, 13 Nov 2024 08:49:59 +0000 (UTC)
Received: from ghost-submission-5b5ff79f4f-kdlwg (unknown [10.110.96.108])
 by director10.ghost.mail-out.ovh.net (Postfix) with ESMTPS id 62E951FEDE;
 Wed, 13 Nov 2024 08:49:58 +0000 (UTC)
Received: from ngraves.fr ([37.59.142.99])
 by ghost-submission-5b5ff79f4f-kdlwg with ESMTPSA
 id gwd+CTZoNGfnQQAAK0A1cw
 (envelope-from <ngraves@HIDDEN>); Wed, 13 Nov 2024 08:49:58 +0000
Authentication-Results: garm.ovh; auth=pass
 (GARM-99G0033c28a5a8-6a2d-45b1-86b3-806610a15d8e,
 E46EE4CFA6AA1EB3B0ED220F39F6A53F8FAC1481) smtp.auth=ngraves@HIDDEN
X-OVh-ClientIp: 90.92.117.144
From: Nicolas Graves <ngraves@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH 0/4] [security] Remove allegro-4.
Date: Wed, 13 Nov 2024 09:47:41 +0100
Message-ID: <20241113084948.19059-1-ngraves@HIDDEN>
X-Mailer: git-send-email 2.46.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 7509189429804458722
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudelgddvtdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhephffvvefufffkofgggfestdekredtredttdenucfhrhhomheppfhitgholhgrshcuifhrrghvvghsuceonhhgrhgrvhgvshesnhhgrhgrvhgvshdrfhhrqeenucggtffrrghtthgvrhhnpeekffegteffgfffjeegjedvfffgtddvueeutefgfeeuvdejgedvgeejjeevueeuveenucfkphepuddvjedrtddrtddruddpledtrdelvddruddujedrudeggedpfeejrdehledrudegvddrleelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddvjedrtddrtddruddpmhgrihhlfhhrohhmpehnghhrrghvvghssehnghhrrghvvghsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehguhhigidqphgrthgthhgvshesghhnuhdrohhrghdpoffvtefjohhsthepmhhoheekgegmpdhmohguvgepshhmthhpohhuth
DKIM-Signature: a=rsa-sha256; bh=1lwG0HVjPNwYwfDdY5/JcnXtDdh5jxNlhJldx0J3w8E=; 
 c=relaxed/relaxed; d=ngraves.fr; h=From;
 s=ovhmo4487190-selector1; t=1731487799; v=1;
 b=gk1Du0dUMiCuiEM14HTCfAUYgnclwQ0YcWRuUsstvVT0oUILdjFnPuYrWBUeWLqAfzVtIg7/
 8Rm/mAxae/iWu9bQS56izvCt8f1hbzcC4C05bumvTsXPhJHZx1SVlGtCU9UqU//qwZQiyq+hgiW
 xiqNDRkqlOUMA/JYOsE9c5eUksvc/atqRuT74ZLYqTyJRSTmd/1w9zz/DuGrKT3oVt/Xm19RO0o
 YzwRa1AB+mowolYd+dHPfdVzUwMCXpVCj5hcLIysfyyLrjcBLTvZfXn9nWLkkpCiHEoiX0H/ks7
 d/XOrISoZQIgyNcihs/dHre7mqcIrghASnr4SH85JnScw==
Received-SPF: pass client-ip=188.165.33.112; envelope-from=ngraves@HIDDEN;
 helo=8.mo584.mail-out.ovh.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
Cc: Nicolas Graves <ngraves@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

This package has a CVE, and its development is not supported upstream
anymore.  

Nicolas Graves (4):
  gnu: libresprite: Update to 1.1.
  gnu: Remove aseprite.
  gnu: Remove dumb-allegro4.
  gnu: Remove allegro-4.

 gnu/packages/game-development.scm | 146 ++++++------------------------
 gnu/packages/music.scm            |  12 ---
 2 files changed, 27 insertions(+), 131 deletions(-)

-- 
2.46.0




------------=_1746019802-1768-1--

Message sent to Nicolas Graves <ngraves@HIDDEN>:

X-Loop: help-debbugs@HIDDEN
Subject: bug#74335: CVE and removal of allegro-4
Reply-To: Andreas Enge <andreas@HIDDEN>, 74335-quiet <at> debbugs.gnu.org
Mail-Followup-To: Andreas Enge <andreas@HIDDEN>, 74335-quiet <at> debbugs.gnu.org
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-To: Nicolas Graves <ngraves@HIDDEN>
Resent-Date: Wed, 30 Apr 2025 13:30:03 +0000
Resent-Message-ID: <handler.74335.U74335.17460197601676 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 74335
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: Steve George <steve@HIDDEN>
Cc: 74335-done <at> debbugs.gnu.org, 74335-submitter <at> debbugs.gnu.org
Received: via spool by 74335-submitter <at> debbugs.gnu.org id=U74335.17460197601676
          (code U ref 74335); Wed, 30 Apr 2025 13:30:03 +0000
Received: (at 74335-submitter) by debbugs.gnu.org; 30 Apr 2025 13:29:20 +0000
Received: from localhost ([127.0.0.1]:40794 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uA7V1-0000Qx-Mj
	for submit <at> debbugs.gnu.org; Wed, 30 Apr 2025 09:29:20 -0400
Received: from hera.aquilenet.fr ([185.233.100.1]:56974)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <andreas@HIDDEN>)
 id 1uA7Us-0000QJ-Lt; Wed, 30 Apr 2025 09:29:11 -0400
Received: from localhost (localhost [127.0.0.1])
 by hera.aquilenet.fr (Postfix) with ESMTP id A2F62291;
 Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Authentication-Results: hera.aquilenet.fr;
	none
X-Virus-Scanned: Debian amavis at hera.aquilenet.fr
Received: from hera.aquilenet.fr ([127.0.0.1])
 by localhost (hera.aquilenet.fr [127.0.0.1]) (amavis, port 10024) with ESMTP
 id 7QByot2A62Bc; Wed, 30 Apr 2025 15:29:02 +0200 (CEST)
Received: from jurong (176-179-191-150.abo.bbox.fr [176.179.191.150])
 by hera.aquilenet.fr (Postfix) with ESMTPSA id 92374105;
 Wed, 30 Apr 2025 15:29:00 +0200 (CEST)
Date: Wed, 30 Apr 2025 15:28:58 +0200
From: Andreas Enge <andreas@HIDDEN>
Message-ID: <aBIlmnCQAp4qqHrd@jurong>
References: <Z_UgmLBi4SDctuxl@t25sg>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Z_UgmLBi4SDctuxl@t25sg>
X-Rspamd-Queue-Id: A2F62291
X-Spamd-Result: default: False [5.40 / 15.00]; SPAM_FLAG(5.00)[];
 NEURAL_SPAM(3.00)[1.000]; BAYES_HAM(-3.00)[99.98%];
 MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.10)[text/plain];
 TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+];
 RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2];
 RCPT_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[];
 RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[]
X-Spamd-Bar: +++++
X-Rspamd-Action: greylist
X-Rspamd-Server: hera
X-Spam-Level: *****
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hello!

I have not found a CVE number, but the arguments given by Nicolas are
convincing enough for the package removals. I have pushed.

Thanks!

Andreas

Last modified: Wed, 30 Apr 2025 13:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.