On Tue, 31 Jan 2023, Ludovic Courtès wrote:
Jack Hill <jackh...@jackhill.us> skribis:
Then there's the question of what to do in the meantime for
master. Grafts for 3.7.2? Move packages to 3.7.7?
Graft, after making sure both versions are ABI-compatible (it should be
the case).
Unfortunately, we may not be so lucky. ABI Laboratory* reports that were
some changes in 3.7.3 [0]. Does that look like it would be problem? For
reference, the fixes for the announced security advisories looks small
enough that a backport is feasible (although I haven't tried yet) [1][2].
* I don't know if we have ABI checking tools in Guix. The ones that power
ABI Laboratory look like candidates for packaging though.
[0]
https://abi-laboratory.pro/index.php?view=compat_report&l=gnutls&v1=3.7.2&v2=3.7.3&obj=0a750&kind=abi#Symbol_Problems_High
[1]
https://gitlab.com/dueno/gnutls/-/commit/22f837ba0bc7d13c3d738a8583566368fc12aee1
[2] https://gitlab.com/gnutls/gnutls/-/merge_requests/1615/diffs
Anyways, I'm of course happy to propose some patches (keeping in mind the
usual competition for my time, so it might be a couple days).
Best,
Jack
