bug#32026: [PATCH v3 10/11] gnu: nss-next: Update to 3.88.1 [fixes CVE-2023-0767].

[Tobias Geerinckx-Rice via Bug reports for GNU Guix]

Maxim Cournoyer 写道：

It's already been pushed for nss-next, and Tobias has taken care of grafting our main 'nss' package, which has many dependents. See commits

246a3d90eac82966b691bdca4660ab9c5d802631 and
b04ee227a47419291391a2b6e857e41ed1c32155, respectively.

Grafting such a big version jump made me nervous.



I'd much rather deal with ABI bug reports than the alternative :-)

Kind regards,

T G-R

I did so anyway, partially on Mozilla's assurance (FWIW) that it's ABI-compatible, but mainly because I dare not vouch for a single cherry-pick to 3.81 actually keeping users safe.

signature.asc
Description: PGP signature