bug#70174: OpenEXR is vulnerable to CVE-2023-5841 and CVE-2021-45942

On Thu, Apr 04, 2024 at 02:50 AM, John Kehayias wrote: > Hello, > > On Thu, Apr 04, 2024 at 01:07 AM, Vinicius Monego wrote: > >> OpenEXR suffers from these vulnerabilities which were fixed in version >> 3.2.2 [1] and 3.1.4 [2], respectively, while our version is currently >> 3.1.3. >> >> The

bug#70174: OpenEXR is vulnerable to CVE-2023-5841 and CVE-2021-45942

Hello, On Thu, Apr 04, 2024 at 01:07 AM, Vinicius Monego wrote: > OpenEXR suffers from these vulnerabilities which were fixed in version > 3.2.2 [1] and 3.1.4 [2], respectively, while our version is currently > 3.1.3. > > The package contains 448 dependents, and a change in derivation >

bug#70174: OpenEXR is vulnerable to CVE-2023-5841 and CVE-2021-45942

OpenEXR suffers from these vulnerabilities which were fixed in version 3.2.2 [1] and 3.1.4 [2], respectively, while our version is currently 3.1.3. The package contains 448 dependents, and a change in derivation shouldn't be pushed to master, at least according to the patch submission

bug#70170: emacs-strait-el: build failure

Hello, after a recent guix pull, I am getting a failure when building emacs-straight-el. ``` ice-9/boot-9.scm:1685:16: In procedure raise-exception: In procedure stat: No such file or directory:

bug#70140: Missing ./doc/guix-cookbook.pt_BR.texi

My apologies for not giving a good response. Yes, the issue you mention is indeed different from a record ABI mismatch, in that the error message for an ABI message says “recompilation needed” and is documented in the manual, unlike the problematic error message that you reported. Adding a note

bug#70111: [PATCH] gnu: gnome-essential-extras: Propagate xdg-desktop-portal.

Hello, Dariqq writes: > xdg-desktop-portal (and xdg-desktop-portal-gnome) is needed for the dark theme > in Gnome 44 to work properly. > > * gnu/packages/gnome.scm (gnome-essential-extras)[propagated-inputs]: Add > xdg-desktop-portal. > > Change-Id: Id84626e6bc404e9607ee7f8f299ac90f24323081

bug#70051: guix system hangs on boot with LUKS /home partition

I can confirm aurtzy's patch works (just tested on top of 7af70efd7633b0d70091762cf43ce01a86176e8e)

bug#56611: Build failure of font-abattis-cantarell@0.303 due to test fail fontPens.penTools.estimateQuadraticCurveLength

Hi, Jacob Hrbek writes: > === FAILURES > === > ___ [doctest] fontPens.penTools.estimateQuadraticCurveLength > ___ > 155 > 156 Estimate the length of this curve by iterating > 157 through it and averaging the

bug#70165: D-Bus system service breaks reconfiguration when /var/run/dbus is present + /run and /var/run are on separate file systems.

Hi, I have /var/run and /run on separate file systems, recently I noticed system reconfiguration stopped with "guix system: error: rename-file: Invalid cross-device link": --8<---cut here---start->8--- newfstatat(AT_FDCWD, "/run", {st_mode=S_IFDIR|0755,

bug#70164: home-bash-service default PS1 overwrites .bashrc PS1 in login shells

Hi Guix! A common convention for where to set PS1 is in .bashrc, not .bash_profile [1-3]. Unfortunately home-bash-service doesn't support this convention for login shells. home-bash-service generates a default .bash_profile that follows these steps: 1. Source .profile 2. Source .bashrc 3. Set

bug#70140: Missing ./doc/guix-cookbook.pt_BR.texi

Hi Florian, > This advice [...] I don’t think [...] it is worth the notification [...] It ate me away ~1 work-hour, from the "It doesn't compile, what the hell!?!" moment, all the way through the "What am I doing wrong?... Nothing!" phases, until I found the culprit. And then the search for a

bug#70121: [PATCH] gnu: emacs-magit: Fix generation of autoloads.

On Wed, Apr 03 2024, Clément Lassieur wrote: > On Mon, Apr 01 2024, Liliana Marie Prikler wrote: > >> * gnu/packages/emacs-xyz.scm (emacs-magit)[#:phases]: Replace >> ‘make-autoloads’ >> like the others. >> >> Fixes: Magit autoloads are missing >> --- > > Hi, > >

bug#70121: [PATCH] gnu: emacs-magit: Fix generation of autoloads.

On Mon, Apr 01 2024, Liliana Marie Prikler wrote: > * gnu/packages/emacs-xyz.scm (emacs-magit)[#:phases]: Replace ‘make-autoloads’ > like the others. > > Fixes: Magit autoloads are missing > --- Hi, Tested, looks good to me.

bug#70140: Missing ./doc/guix-cookbook.pt_BR.texi

Hello Rostislav, This advice would not be read by most affected Guix developers. The problem is that every guix developer must rerun ./bootstrap and ./configure on pulling certain changes like ABI breaks (when a new record is added) and new cookbook versions. Every Guix developer making a

bug#70111: [PATCH] gnu: gnome-essential-extras: Propagate xdg-desktop-portal.

xdg-desktop-portal (and xdg-desktop-portal-gnome) is needed for the dark theme in Gnome 44 to work properly. * gnu/packages/gnome.scm (gnome-essential-extras)[propagated-inputs]: Add xdg-desktop-portal. Change-Id: Id84626e6bc404e9607ee7f8f299ac90f24323081 --- gnu/packages/gnome.scm | 1 + 1

bug#67629: [Cuirass] ‘remote-server’ wrecks havoc when misbehaving clients connect

Ludovic Courtès skribis: > The ‘cuirass remote-server’ process goes awry when misbehaved clients > connect; specifically, some of its fibers crash, leaving it running but > inactive: > > 2023-12-04 10:13:14 periodic update: 0 resumable, 0 failed builds > 2023-12-04 10:13:28 error: Connection

bug#67629: [Cuirass] ‘remote-server’ wrecks havoc when misbehaving clients connect

Hi, Maxim Cournoyer skribis: > Ludovic Courtès writes: > >> The ‘cuirass remote-server’ process goes awry when misbehaved clients >> connect; specifically, some of its fibers crash, leaving it running but >> inactive: > > I guess what I reported in bug#67633 is a symptom of the above problem,