bug#32952: "make check-system" fails to report record-abi-mismatch-error

Hi Guix, On commit d71078bc75d149c70dc573a259986f1731145693, "make check-system" failed for me with the following error message: --8<---cut here---start->8--- [2] [env] marusich@garuda.local:~/guix $ make check-system Compiling Scheme modules... warning: failed

bug#32954: Cuirass: logs of failing tests are unavailable

Hi, The logs of failing tests are unavailable. (Which makes it impossible to understand why a huge lot of tests are failing.) Clément

bug#32955: Cuirass: Some tests depend on 'guix-current', which makes them resource expensive

Hi, Tests depending on 'guix-current' are expensive in terms of CPU and storage usage since we need to build (current-guix) and then store a couple of full system images. They are built at each evaluation because they depend on 'guix-current'. (And they all fail.) test.btrfs-root-os.x86_64-l

bug#32855: sshuttle /usr/bin/env

Tobias Geerinckx-Rice writes: >> Should those lines should be removed? I tested without, and it >> seems to work okay, >> at least for my particular setup: GuixSD client --> non-GuixSD >> server. > > Wouldn't that break [any client -> vanilla GuixSD server] cases? Note that /bin/sh is present

bug#32955: Cuirass: Some tests depend on 'guix-current', which makes them resource expensive

Clément Lassieur writes: > Hi, > > Tests depending on 'guix-current' are expensive in terms of CPU and > storage usage since we need to build (current-guix) and then store a > couple of full system images. > > They are built at each evaluation because they depend on 'guix-current'. > (And they al

bug#32855: sshuttle /usr/bin/env

Marius, Marius Bakke wrote: Note that /bin/sh is present even on vanilla GuixSD. Thanks. I should probably give this vanilla GuixSD of which you speak a try some time :-) Kind regards, T G-R

bug#32878: Python-3 CVE-2018-14647

Leo Famulari writes: > Our Python 3.6.5 package is vulnerable to CVE-2018-14647, fixed in > CPython commit f7666e828cc3d5873136473ea36ba2013d624fa1, released in > v3.6.7rc1: > > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647 Reading , this issue

bug#32957: Python uses a bundled expat

Python 2 and 3 are using a bundled Expat (residing under Modules/). This has been the cause of security vulnerabilities in the past and should be changed to use Expat from Guix. signature.asc Description: PGP signature

bug#32878: Python-3 CVE-2018-14647

Marius Bakke writes: > This patch adds a graft for Python: > > From a60d655fd4dddb86e1c8134c675fb61af52b32af Mon Sep 17 00:00:00 2001 > From: Marius Bakke > Date: Sat, 6 Oct 2018 16:47:05 +0200 > Subject: [PATCH] gnu: python: Fix CVE-2018-14647. > > * gnu/packages/patches/python-CVE-2018-14647.p

bug#32877: Python-2 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-1000802

Leo Famulari writes: > Here are some bugs that apply to our Python 2.7.14 package. > > CVE-2018-1060 (fixed upstream in Python 2.7.15): > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060 > > CVE-2018-1061 (fixed upstream in Python 2.7.15): > https://cve.mitre.org/cgi-bin/cvename.cgi?n

bug#32949: Go 1.11 keeps references to bootstrap Go, many other packages

Hello Leo, I have found a possible source of the references. In the package output, in the pkg/obj/go-build directory there are a huge amount of test logs, and the bootstrap go is stat-ed during these tests. See for example the file pkg/obj/go-build/f7/f749... I'm not very much into go, but I bel

bug#32960: icedtea not reproducible

< --- > diff -r /gnu/store/jz27ll2yb5cf2ihkjw58sx92gpw2pana-icedtea-3.7.0-doc/share/doc/icedtea/jre/api/security/smartcardio/spec/serialized-form.html /gnu/store/jz27ll2yb5cf2ihkjw58sx92gpw2pana-icedtea-3.7.0-doc-check/share/doc/icedtea/jre/api/security/smartcardio/spec/serialized-form.html