Re: v2: OpenJPEG security fixes (CVE-2016-{5157,7163})

f2 Mon Sep 17 00:00:00 2001 > > From: Leo Famulari > > Date: Fri, 9 Sep 2016 16:08:02 -0400 > > Subject: [PATCH 1/2] gnu: mupdf: Update to 1.9a. > > > > * gnu/packages/pdf.scm (mupdf): Update to 1.9a. > > [source]: Use "mupdf-build-with-openjpeg-2.1.patch&quo

Re: guix-pull prints stack trace

On Sat, Sep 10, 2016 at 01:14:10PM +0800, Alex Vong wrote: > Hello, > > It seems the commit c41d97b causes guix-pull to print stack trace. > > Here is the stack trace: > === > In ice-9/psyntax.scm: > 989: 19 [scan ((define-m

Re: Superseded packages

On Tue, Sep 06, 2016 at 11:36:32PM +0200, Ludovic Courtès wrote: > Hi! > > l...@gnu.org (Ludovic Courtès) skribis: > > > I had an idea to use a ‘superseded’ entry in ‘properties’ that would > > tell ‘guix package’ et al. to upgrade to the new package: > > > > (package > > (name "attic") > >

Re: [PATCH] gnu: Add sonata

On Sat, Sep 10, 2016 at 12:31:33PM +0100, Christopher Baines wrote: > * gnu/packages/mpd.scm (sonata): New variable. Wow, I'm very happy to see this package fixed up :) > +(inputs > + `(("gettext" ,gnu-gettext) All looks good to me except for the gettext issue discussed earlier. $ guix

Re: [PATCH] gnu: Add dlib.

On Sat, Sep 10, 2016 at 01:32:22PM +0100, Marius Bakke wrote: > Marius Bakke writes: > > > Leo Famulari writes: > > > >> Changing the subject, you could disable the tests per-architecture. Look > >> for uses of current-target-system and current-system for

Re: [PATCH] gnu: Simplify dtc package definition.

On Thu, Sep 08, 2016 at 08:45:26PM +0200, David Craven wrote: > Hi Danny, > > I don't have any special settings configured, just the default. > > Your patches are missing a header like this one: > > From fc0e6e2ae96b0586035de96c65cfd08186ceb28a Mon Sep 17 00:00:00 2001 > From: Efraim Flashner >

Re: [PATCH] gnu: glew: Update to 2.0.0.

On Thu, Sep 08, 2016 at 09:03:47PM +, ng0 wrote: > * gnu/packages/gl.scm (glew): Update to 2.0.0. Thanks! Supertux worked with this change, so I pushed as 766c1488cc.

Re: [PATCH] gnu: Add bind

On Wed, Aug 31, 2016 at 08:38:53PM +0200, John Darrington wrote: > Thanks for the comments, > > On Wed, Aug 31, 2016 at 01:52:11PM -0400, Leo Famulari wrote: > On Tue, Aug 30, 2016 at 06:36:04PM +0200, John Darrington wrote: > > * gnu/packages/networking.scm (b

Re: [PATCH v2] gnu: Add mtd-utils.

On Wed, Sep 07, 2016 at 09:29:46AM +0300, Efraim Flashner wrote: > > +(license (list license:gpl2 license:mpl1.1 license:bsd-3 > > Is the package under all three licenses or are certain parts under > different licenses? I've found packages that include a mozilla license > seem to have thes

Re: [PATCH] gnu: Add mash.

On Thu, Sep 08, 2016 at 11:06:44PM +0100, Marius Bakke wrote: > Leo Famulari writes: > > > On Thu, Sep 01, 2016 at 11:00:39AM +0100, Marius Bakke wrote: > >> I had these in inputs initially and was surprised to see no references. > >> Both seems to be compiled i

Re: [PATCH] gnu: Add mash.

On Thu, Sep 08, 2016 at 11:06:44PM +0100, Marius Bakke wrote: > * gnu/packages/bioinformatics.scm (mash): New variable. Anyways, pushed as 84be3b9920120e7cc03095baca06d61b7f3fb741. If the package needs more changes, we will change it :)

Re: [PATCH] gnu: Add sonata

On Sun, Sep 11, 2016 at 11:00:37AM +0100, Christopher Baines wrote: > * gnu/packages/mpd.scm (sonata): New variable. Thanks! Pushed as 6c86cef5d36d613be0a62f8f18e276232abf51f0. This will make it easier for my houseguests to control the stereo :)

Re: Superseded packages

On Sun, Sep 11, 2016 at 03:46:34PM +0200, Ludovic Courtès wrote: > > I'm not sure about Attic / Borg. Superseding attic will break > > automation, although I did that when I made letsencrypt inherit from > > certbot. Also, the authors are different. Advice? > > I would make Borg supersede Attic.

Re: [PATCH] gnu: Add perl-mhonarc.

On Sun, Sep 11, 2016 at 09:21:39AM +0300, Efraim Flashner wrote: > On Wed, Sep 07, 2016 at 06:24:39PM +, ng0 wrote: > > +(license gpl2))) > > This looks good to me. Anyone else want to take a look at it before I > push it? Looks good, although almost of the Perl files in 'lib/' include th

GnuTLS security update

There is a GnuTLS security advisory [0] regarding "an issue that affects validation of certificates using OCSP responses, which can falsely report a certificate as valid under certain circumstances." I updated GnuTLS on core-updates to 3.5.4, the latest release of the 3.5 series. For master, the

Re: [PATCH] gnu: update installation-os for new mingetty-configuration.

On Sun, Sep 11, 2016 at 06:47:15PM +0200, Jan Nieuwenhuizen wrote: > Hi! > > It seems that commit > > Add login-service (317d3b474ab5e0e62509dd1b5b2fbbf2e27c95fe) > > break installation-os on master. Fix attached. The breakage was fixed in a slightly different way with 2932ab9ca44cc6a5fac6

Re: [PATCH] gnu: Add sonata

On Sun, Sep 11, 2016 at 08:01:19PM +0300, Alex Kost wrote: > Christopher Baines (2016-09-11 11:00 +0100) wrote: > > + #:use-module ((guix build glib-or-gtk-build-system) #:prefix > > glib-or-gtk:) > > This line is not needed. You use it in the #:modules argument in the > package definition, but

Re: GnuTLS security update

ttached a patch that uses a graft to replace gnutls@3.5.2 with gnutls-3.5.4, which is the latest release. However, while testing the patch, I noticed something surprising: $ git show commit 2f6a667cfe87d13a878e7ca97e3f760771f22ce1 Author: Leo Famulari Date: Sat Sep 10 18:09:20 2016 -0400 gnu:

Re: [PATCH] gnu: Add sslh.

On Mon, Sep 12, 2016 at 02:32:08AM +0200, Tobias Geerinckx-Rice wrote: > * gnu/packages/networking.scm (sslh): New variable. Interesting package! > + ;; Many of these files are mentioned in the man page. Install them. > + (add-after 'install 'install-documentation > +

Re: GnuTLS security update

On Sun, Sep 11, 2016 at 09:53:22PM -0400, Leo Famulari wrote: > The problem is that the msmtp package I have built using this patch does > not refer to the grafted gnutls. I got the same result after building a > fresh Git clone of Guix. To clarify, I think that the msmtp package is

Re: GnuTLS security update

On Mon, Sep 12, 2016 at 02:56:13PM +0200, Ludovic Courtès wrote: > msmtp uses a GnuTLS that is different from from both other GnuTLS. The GnuTLS being used [0] corresponds to the GnuTLS on the master branch from before I pushed this graft. > I think the bug has to do with the fact that GnuTLS has

Re: [PATCH 1/1] gnu: Add acme-client.

On Fri, Sep 02, 2016 at 10:49:38AM -0400, Leo Famulari wrote: > * gnu/packages/tls.scm (acme-client): New variable. Thanks for the feedback, everyone. Pushed as 0581c273a4d5171a477d89f109c46d7ab3691429, with a followup commit that adds some detail to certbot's synopsis.

Re: [PATCH] gnu: python-py3status: Update to 3.1.

On Mon, Sep 12, 2016 at 07:24:51PM +0200, Ivan Vilata-i-Balaguer wrote: > * gnu/packages/python.scm (python-py3status): Update to 3.1. Thanks! I've applied the patch as d2262d7052c9ca65d2dde600e3dbe0b4e72f289c.

Expat regression fix for master branch

net/p/expat/code_git/ci/af507cef2c93cb8d40062a0abe43a4f4e9158fb2 From 14abba35d1b8c455ce597b5c0eed4bcf87499e6a Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Mon, 12 Sep 2016 16:54:45 -0400 Subject: [PATCH] gnu: expat: Fix regression caused by fix for CVE-2016-0718. * gnu/packages/xml.scm (

Expat upate and regression fix for core-updates

This updates Expat to the latest release, 2.2.0, and applies the upstream patch for a regression caused by the fix for CVE-2016-0718. It's the same patch that I sent earlier in a patch for the master branch. From 69611d71dc4718040bc7bc55117bd2705bad4612 Mon Sep 17 00:00:00 2001 From: Leo Fam

Re: [PATCH] gnu: Add dlib.

On Sat, Sep 10, 2016 at 02:16:09PM -0400, Leo Famulari wrote: > On Sat, Sep 10, 2016 at 01:32:22PM +0100, Marius Bakke wrote: > > Marius Bakke writes: > > > > > Leo Famulari writes: > > > > > >> Changing the subject, you could disable the tests per-

Re: [PATCH] gnu: Add dlib.

On Sat, Sep 10, 2016 at 01:32:22PM +0100, Marius Bakke wrote: > + (add-after 'disable-asserts 'disable-failing-tests > + (lambda _ > + ;; One test times out on MIPS, so we need to disable it. > + ;; The rest is known to fail on non-x86_64 platforms in the

Re: [PATCH] gnu: Add perl-mhonarc.

On Sun, Sep 11, 2016 at 03:46:34PM +, ng0 wrote: > Should this then be adjusted to gpl2+ ? I took the information from > their website. Yes, I think it should be gpl2+, since the source files seem to all say "or later".

Re: [PATCH] gnu: r-curl: Respect CURL_CA_BUNDLE variable.

On Wed, Sep 07, 2016 at 04:56:59PM +0200, Ricardo Wurmus wrote: > * gnu/packages/web.scm (r-curl)[arguments]: Add phase > "allow-CURL_CA_BUNDLE". > --- > gnu/packages/web.scm | 13 + > 1 file changed, 13 insertions(+) > > diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm > inde

Re: [PATCH 1/2] gnu: r-htmltools: Ensure temporary files can be deleted.

On Thu, Sep 08, 2016 at 02:51:04PM +0200, Ricardo Wurmus wrote: > * gnu/packages/web.scm (r-htmltools)[arguments]: Add phase > "copy-files-without-mode". LGTM

Re: [PATCH 2/2] gnu: r-rmarkdown: Ensure temporary files can be deleted.

On Thu, Sep 08, 2016 at 02:51:05PM +0200, Ricardo Wurmus wrote: > * gnu/packages/statistics.scm (r-rmarkdown)[arguments]: Add phase > "copy-files-without-mode". LGTM

Re: [PATCH] gnu: Add microcom

On Sun, Sep 11, 2016 at 06:56:58PM +0200, John Darrington wrote: > * gnu/packages/microcom.scm: New file. > * gnu/local.mk (GNU_SYSTEM_MODULES): Add it. > +(version "2016.01.09") I think we should use the upstream tag, "v2016.01.0". > +(source (origin > + (method git-fetch)

Re: [PATCH] gnu: Add darkhttpd.

On Mon, Sep 12, 2016 at 12:50:14AM +0530, Arun Isaac wrote: > * gnu/packages/web.scm (darkhttpd): New variable. Thanks for this patch! > +(version "1.12") > +(source > + (origin > + ;; The darkhttpd release tarball URL fails to download with a > + ;; 'TLS warning alert'. D

Re: [PATCH] gnu: Add python-gunicorn and python2-gunicorn.

On Sun, Sep 11, 2016 at 10:50:35PM +0200, Hartmut Goebel wrote: > * gnu/packages/web.scm (python-gunicorn, python2-gunicorn): New > variables. Thanks for this! Regarding the naming question, I think it's fine to call it 'gunicorn'. Prefixing with 'python-' is more appropriate for libraries and o

Re: [PATCH v4 3/3] gnu: Update ldc to 0.17.1.

On Tue, Sep 13, 2016 at 12:30:42PM +0200, Danny Milosavljevic wrote: > * gnu/packages/ldc.scm (ldc): Update to 0.17.1. With this patch, LDC fails to build on my x86_64 machine with the familiar errors about isnan and isinf: [ 11%] Building CXX object CMakeFiles/LDCShared.dir/dmd2/scope.c.o /gnu/s

Re: [PATCH v4 2/3] gnu: Make ldc work again

On Tue, Sep 13, 2016 at 12:30:41PM +0200, Danny Milosavljevic wrote: > * gnu/packages/ldc.scm (ldc): Added substitution. Added zlib input. Fix llvm > and clang inputs to 3.7. LDC built with this patch. I'm currently in the test suite. If it passes on my computer, I'd like to push this patch unles

Re: [PATCH v4 1/3] gnu: Add python-lit, python2-lit.

On Tue, Sep 13, 2016 at 12:30:40PM +0200, Danny Milosavljevic wrote: > > * gnu/packages/python.scm (python-lit, python2-lit): New variables. Pushed as 243db8245e6 with some minor indentation adjustments and an expanded description. Thanks!

Re: [PATCH] gnu: Add qscintilla.

On Tue, Sep 13, 2016 at 10:37:56AM -0400, Kei Kebreau wrote: > Kei Kebreau writes: > > A component necessary for GNU Octave's GUI. > > How does it look? > Not sure how packaging Qt packages goes, but I've discovered that > GNU Octave's GUI only builds with Qt4 support. I've changed the patch to >

Re: [PATCH 1/2] doc: "Various Services" -> "Miscellaneous Services"

On Tue, Sep 13, 2016 at 02:18:20PM +0200, John Darrington wrote: > On Tue, Sep 13, 2016 at 01:28:01PM +0200, Ludovic Court??s wrote: > John Darrington skribis: > > > * doc/guix.texi (Services): "Various" -> "Miscellaneous" > > How does the meaning of these two words diff

Re: [PATCH] gnu: Add microcom

On Tue, Sep 13, 2016 at 07:37:49PM +0200, John Darrington wrote: > On Tue, Sep 13, 2016 at 11:36:17AM -0400, Leo Famulari wrote: > On Sun, Sep 11, 2016 at 06:56:58PM +0200, John Darrington wrote: > > +(license gpl2+))) > > My interpretation of the

Re: [PATCH v4 2/3] gnu: Make ldc work again

On Tue, Sep 13, 2016 at 12:53:39PM -0400, Leo Famulari wrote: > On Tue, Sep 13, 2016 at 12:30:41PM +0200, Danny Milosavljevic wrote: > > * gnu/packages/ldc.scm (ldc): Added substitution. Added zlib input. Fix > > llvm and clang inputs to 3.7. > > LDC built with this patch.

Re: [PATCH 1/2] doc: "Various Services" -> "Miscellaneous Services"

On Tue, Sep 13, 2016 at 07:42:33PM +0200, John Darrington wrote: > On Tue, Sep 13, 2016 at 01:10:44PM -0400, Leo Famulari wrote: > On Tue, Sep 13, 2016 at 02:18:20PM +0200, John Darrington wrote: > > On Tue, Sep 13, 2016 at 01:28:01PM +0200, Ludovic Court??s wrote: >

Re: [PATCH] gnu: Add qscintilla.

On Tue, Sep 13, 2016 at 02:01:33PM -0400, Kei Kebreau wrote: > Like below? And how could I then access qscintilla-for-octave from > maths.scm if it isn't defined publicly? Yes, that looks right. But I would put qscintilla-for-octave in maths.scm to avoid the issue you describe. signature.asc Des

Re: [PATCH 2/2] gnu: lispf4: Remove unused inputs key.

On Mon, Sep 12, 2016 at 01:57:56PM +, ng0 wrote: > * gnu/packages/lisp.scm (lispf4)[arguments]: Remove unused > inputs from 'install phase. > [source](file-name): Append -checkout to the file-name. Pushed! Now to make it work :)

Re: [PATCH] gnu: Add qscintilla.

On Tue, Sep 13, 2016 at 02:59:31PM -0400, Kei Kebreau wrote: > Leo Famulari writes: > > > On Tue, Sep 13, 2016 at 02:01:33PM -0400, Kei Kebreau wrote: > >> Like below? And how could I then access qscintilla-for-octave from > >> maths.scm if it isn't define

Re: [PATCH 2/2] gnu: Add libpsyc.

On Tue, Sep 13, 2016 at 11:32:37AM +, ng0 wrote: > * gnu/packages/psyc.scm (libpsyc): New variable. LGTM!

Re: [PATCH 1/2] gnu: Add perl-net-psyc.

On Tue, Sep 13, 2016 at 11:32:36AM +, ng0 wrote: > * gnu/packages/psyc.scm: New file. > * gnu/local.mk (GNU_SYSTEM_MODULES): Add it. This package looks pretty good to me! > + (replace 'install > + (lambda* (#:key outputs #:allow-other-keys) > + (let* ((out (assoc

Re: [PATCH v4 2/3] gnu: Make ldc work again

On Tue, Sep 13, 2016 at 09:20:05PM +0200, Ricardo Wurmus wrote: > > Leo Famulari writes: > > > On Tue, Sep 13, 2016 at 12:53:39PM -0400, Leo Famulari wrote: > >> On Tue, Sep 13, 2016 at 12:30:41PM +0200, Danny Milosavljevic wrote: > >> > * gnu/packages/ldc.

Re: [PATCH 1/2] gnu: Add femtolisp.

On Mon, Sep 12, 2016 at 01:57:55PM +, ng0 wrote: > * gnu/packages/lisp.scm (femtolisp): New variable. Thanks! Pushed with the following minor changes: > + (let* ((commit "68c5b1225572ecf2c52baf62f928063e5a30511b") > +(revision "1")) I made it use (let) instead of (let*). The differe

Re: Expat upate and regression fix for core-updates

On Tue, Sep 13, 2016 at 11:55:14PM +0200, Ludovic Courtès wrote: > > From 69611d71dc4718040bc7bc55117bd2705bad4612 Mon Sep 17 00:00:00 2001 > > From: Leo Famulari > > Date: Mon, 12 Sep 2016 13:26:51 -0400 > > Subject: [PATCH] gnu: expat: Update to 2.2.0. > > >

Re: [PATCH] gnu: r-curl: Respect CURL_CA_BUNDLE variable.

On Tue, Sep 13, 2016 at 11:53:33PM +0200, Roel Janssen wrote: > This patch was essential to me being able to interact with HTTPS urls in > R. As far as I understand, by default, R only looks for CURL_CA_BUNDLE > on Windows, but with this patch it looks for CURL_CA_BUNDLE on GNU/Linux > as well. I

Re: [PATCH] gnu: Add qscintilla.

On Tue, Sep 13, 2016 at 08:48:43PM +, Efraim Flashner wrote: > On September 13, 2016 11:37:35 PM GMT+03:00, Kei Kebreau > wrote: > >In this case, should I leave qtscintilla-qt4 as a public package in > >qt.scm > >instead of maths.scm as Leo suggested? > > That's where I would leave it. You c

[PATCH 0/1] curl: Fix CVE-2016-7167

This patch updates the curl replacement to 7.50.3, the latest release, in order to fix CVE-2016-7167: https://curl.haxx.se/docs/adv_20160914.html Leo Famulari (1): gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167]. gnu/packages/curl.scm | 8 1 file changed, 4 insertions

[PATCH 1/1] gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167].

* gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.3. (curl-7.50.2): Replace with (curl-7.50.3): ... this. --- gnu/packages/curl.scm | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm index f3c0ade..5cd8086 100644

Re: [PATCH 1/1] gnu: curl: Update replacement to 7.50.3 [fixes CVE-2016-7167].

On Wed, Sep 14, 2016 at 09:03:03PM +0300, Efraim Flashner wrote: > On Wed, Sep 14, 2016 at 01:23:20PM -0400, Leo Famulari wrote: > > * gnu/packages/curl.scm (curl)[replacement]: Update to 7.50.3. > > (curl-7.50.2): Replace with > > (curl-7.50.3): ... this. > > Loo

Re: Expat regression fix for master branch

On Tue, Sep 13, 2016 at 11:54:09PM +0200, Ludovic Courtès wrote: > It’s enough to have the patch in ‘core-updates’ only, but I could go > either way. WDYT? I could go either way, too. It depends on how much we want to support use of Guix outside of our package tree. At least we have made the iss

Re: [PATCH] gnu: Add qscintilla.

On Wed, Sep 14, 2016 at 02:11:44PM -0400, Kei Kebreau wrote: > Leo Famulari writes: > > > On Tue, Sep 13, 2016 at 08:48:43PM +, Efraim Flashner wrote: > >> On September 13, 2016 11:37:35 PM GMT+03:00, Kei Kebreau > >> wrote: > >> >In this case,

Re: [PATCH] gnu: Add r-e1071.

On Wed, Sep 14, 2016 at 11:53:50AM +0200, Ricardo Wurmus wrote: > * gnu/packages/statistics.scm (r-e1071): New variable. LGTM

Re: [PATCH 5/5] gnu: Resurrect hydra.

On Tue, Sep 13, 2016 at 06:59:41PM +0200, Jan Nieuwenhuizen wrote: > * gnu/packages/patches/hydra-automake-1.15.patch: Remove. > * gnu/local.mk (dist_patch_DATA): Remove it. > * gnu/packages/ci.scm (hydra): Bump to 20151030. Fixes building with > nix-1.11.x. Add new libpqxx and perl-net-statsd de

Re: [PATCH] gnu: gnurl: Update to 7.50.3.

On Wed, Sep 14, 2016 at 07:36:03PM +, ng0 wrote: > * gnu/packages/gnunet.scm (gnurl): Update to 7.50.3. Thanks! Pushed as 991847748a554deb9bc6d6a7b4f8a5e9164365c6

Re: New package: python-glances

On Tue, Sep 13, 2016 at 10:02:37PM +0200, Stefan Reichör wrote: > Subject: [PATCH] gnu: Add python-glances Thank you for this patch! For Python software, we like to add packages for both the Python 3 and Python 2 versions, if the software supports it. The PyPi page [0] suggests that Glances does

Re: [PATCH] gnu: Add r-rtsne.

On Wed, Sep 14, 2016 at 09:38:34AM +0200, Ricardo Wurmus wrote: > * gnu/packages/statistics.scm (r-rtsne): New variable. > +(license license:bsd-3))) Some of the files in 'src/' use a 4-clause BSD license.

Re: [PATCH] gnu: Add darkhttpd.

0530 Subject: [PATCH] gnu: Add darkhttpd. * gnu/packages/web.scm (darkhttpd): New variable. Signed-off-by: Leo Famulari --- gnu/packages/web.scm | 44 1 file changed, 44 insertions(+) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index b9c201d.

Re: [PATCH] gnu: Add perl-mhonarc.

On Wed, Sep 14, 2016 at 09:29:46AM +, ng0 wrote: > Leo Famulari writes: > > > On Sun, Sep 11, 2016 at 03:46:34PM +, ng0 wrote: > >> Should this then be adjusted to gpl2+ ? I took the information from > >> their website. > > > > Yes, I think it sh

Re: [PATCH 1/3] gnu: Add python-pytest-pep8.

On Sun, Sep 11, 2016 at 03:07:35PM +0100, Marius Bakke wrote: > * gnu/packages/python.scm (python-pytest-pep8, python2-pytest-pep8): New > variables. Overall LGTM... > +(description "Pytest plugin for efficiently checking PEP8 compliance") I think we can drop "efficiently". I can do that b

Re: [PATCH 2/3] gnu: Add python-pytest-flakes.

On Sun, Sep 11, 2016 at 03:07:36PM +0100, Marius Bakke wrote: > * gnu/packages/python.scm (python-pytest-flakes, python2-pytest-flakes): > New variables. > +(description "Pytest plugin for efficiently checking python source > +with pyflakes.") I have the same question about removing "effici

Re: [PATCH 3/3] gnu: Add python-natsort.

On Sun, Sep 11, 2016 at 03:07:37PM +0100, Marius Bakke wrote: > * gnu/packages/python.scm (python-natsort, python2-natsort): New variables. Thanks! I pushed the patch series as 5467ea6200e7cf9fa57f340849b6ec1becc87b3d

Re: [PATCH] refresh nss-certs

On Wed, Sep 07, 2016 at 01:13:19PM +0200, Vincent Legoll wrote: > On Fri, Sep 2, 2016 at 2:21 PM, Ludovic Courtès wrote: > > If NSS and its main users (IceCat) build fine, I would suggest applying > > this patch. > > Build tested on GuixSD, .config/guix/latest pointing to current git, > with abov

Re: [PATCH] gnu: Add darkhttpd.

On Thu, Sep 15, 2016 at 11:47:16AM +0530, Arun Isaac wrote: > > > I found some tests! See attached. Part of the test suite wants some > > static library from Clang / LLVM; I couldn't make that work in 5 minutes > > so I gave up ;) I think it's okay to commit in this state. > > Yeah, the darkhttpd

cracklib: Fix buffer overflow

This patch cherry-picks an upstream commit to fix a buffer overflow in cracklib. Please see the patch file for more information about the bug. From 62f8f1763ba1766e92e8dc05686bd9353eaf2ad5 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Thu, 15 Sep 2016 11:34:49 -0400 Subject: [PATCH] gnu

Re: 05/05: gnu: prosody: Don't generate example SSL certificates.

On Fri, Sep 16, 2016 at 12:05:18AM +, Tobias Geerinckx-Rice wrote: > nckx pushed a commit to branch master > in repository guix. > > commit 7f39e131805857614a171b51cbf432b4285ba1e6 > Author: Tobias Geerinckx-Rice > Date: Fri Sep 16 01:44:24 2016 +0200 > > gnu: prosody: Don't generate e

Re: [PATCH 1/2] gnu: python: Add python-i3.

On Wed, Sep 14, 2016 at 11:16:38AM +0200, Ivan Vilata i Balaguer wrote: > Subject: [PATCH 1/2] gnu: python: Add python-i3. > > * gnu/packages/python.scm (python-i3, python2-i3): New variables. Thank you for this patch! > +(define-public python-i3 > + (package > +(name "python-i3") I think

Re: [PATCH 0/2] Add quickswitch for i3

On Wed, Sep 14, 2016 at 11:12:29AM +0200, Ivan Vilata i Balaguer wrote: > Hi everyone, Hi! > The following two patches add the [quickswitch for i3][] package. It > depends on [i3-py][], which I renamed to ``python-i3``. The quickswitch > package is named ``i3-quickswitch``. I hope I got the na

Re: [PATCH 2/2] gnu: python: Add i3-quickswitch.

On Wed, Sep 14, 2016 at 11:17:24AM +0200, Ivan Vilata i Balaguer wrote: > Subject: [PATCH 2/2] gnu: python: Add i3-quickswitch. > > * gnu/packages/python.scm (i3-quickswitch): New variable. Cool, this works :) > +(define-public i3-quickswitch > + (package > +(name "i3-quickswitch") Again,

Re: [PATCH] Clean all .go in clean-go

On Fri, Sep 16, 2016 at 12:15:40AM -0500, Eric Bavier wrote: > Another issue that I thought of that's posed by these stray .go files, > which isn't only a problem when acting as a wizard: introducing a new > module import when adding a package, only to have that module > moved/renamed before pushin

Call for volunteer(s) for Guix "security" web page

Hello! GNU Guix should make it easier for bug reporters to contact us to report issues in Guix and Guix packages. So, we'd like to add a short "Security" page to our web site [0]. This page should: 1) Explain how to contact us privately about security issues [1], 2) Describe the Guix release si

[security] gnome-session update required

Will some helpful GNOME user update gnome-session to 3.20.2? There is a heap overflow in the version of gnome-session that we package: https://bugzilla.gnome.org/show_bug.cgi?id=768441 http://seclists.org/oss-sec/2016/q3/526 signature.asc Description: PGP signature

Re: [security] gnome-session update required

On Fri, Sep 16, 2016 at 06:02:54PM -0500, rennes wrote: > Hello, > > > Will some helpful GNOME user update gnome-session to 3.20.2? > > > > There is a heap overflow in the version of gnome-session that we > > package: > > https://bugzilla.gnome.org/show_bug.cgi?id=768441 > > http://seclists.org/o

Re: [security] gnome-session update required

On Sat, Sep 17, 2016 at 11:52:03AM -0500, rennes wrote: > This is the patch to update the version of gnome-session to 3.20.2. > > GuixSD and GNOME works fine after install gnome-session-3.20.2. Thank you for writing and testing the patch! Pushed!

Re: New package: python-glances

On Fri, Sep 16, 2016 at 09:50:23PM +0200, Stefan Reichör wrote: > Leo Famulari writes: > > Can you send an updated patch that adds both python-glances and > > python2-glances using the method demonstrated there? > > Thanks for your review. > You are correct the

Re: Install FAQ: Only build the non-deterministic packages?

On Fri, Sep 16, 2016 at 07:11:00PM +0200, carlo von lynX wrote: > Hello everyone! Hi, welcome! > Some questions I couldn't resolve from manuals and searches: It's always good to hear this kind of question! > I haven't figured out if there is a way to know which packages > are reproducible. I wo

Re: [PATCH 0/7] Add bioconductor package creation tools.

On Thu, Sep 15, 2016 at 01:37:47PM +0200, Roel Janssen wrote: > In the following patch series I add packages to do package development > for Bioconductor. They have a couple of tools to perform extra checks > to ensure Bioconductor packages work together well. > > Since I am trying to add a packa

Re: [PATCH] gnu: Add qscintilla.

On Sun, Sep 18, 2016 at 04:10:15PM -0400, Kei Kebreau wrote: > Andreas Enge writes: > > On Tue, Sep 13, 2016 at 04:37:35PM -0400, Kei Kebreau wrote: > >> In this case, should I leave qtscintilla-qt4 as a public package in qt.scm > >> instead of maths.scm as Leo suggested? > > > > since it is used

Re: [PATCH] Update wireshark to 2.2.0

On Sun, Sep 18, 2016 at 10:56:13PM +0200, Nicolas Goaziou wrote: > Subject: [PATCH] gnu: wireshark: Update to 2.2.0. > > * gnu/packages/networking.scm (wireshark): Update to 2.2.0. Thanks, pushed!

Re: [PATCH] Update giac-xcas

On Mon, Sep 19, 2016 at 12:18:15AM +0200, Nicolas Goaziou wrote: > * gnu/packages/algebra.scm (giac-xcas): Update to 1.2.2-81. Thanks for this patch! Unfortunately, the TLS certificate for has expired, so I'm unable to verify the hash of the new source code.

[PATCH 0/1] gnupg@2.1.13: Fix expired test

GnuPG's 'tofu.test' had a hard-coded expiration date of 2016-09-17. This patch backports the upstream fix. https://bugs.gnupg.org/gnupg/issue2393 https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=e584d6468a2e72cd01e55f46104f9f96b56c0b66 Leo Famulari (1): gnu:

[PATCH 1/1] gnu: gnupg: Fix test failure.

* gnu/packages/patches/gnupg-fix-expired-test.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gnupg.scm (gnupg): Use it. --- gnu/local.mk | 1 + gnu/packages/gnupg.scm| 1 + gnu/packages/patches/gnupg-fix-

Re: e2fsprogs update

On Sun, Sep 18, 2016 at 11:07:34PM +, ng0 wrote: > Hi, > > why don't we package e2fsprogs-libs? I tried to update it, which fails > with a file which apparently got renamed and/or moved into -libs. > Is there any reason why e2fsprogs-libs was not packaged? Is e2fsprogs-lib a separate package?

Re: [PATCH 0/1] gnupg@2.1.13: Fix expired test

On Mon, Sep 19, 2016 at 09:28:00AM +0200, Ricardo Wurmus wrote: > > Leo Famulari (1): > > gnu: gnupg: Fix test failure. > > > > gnu/local.mk | 1 + > > gnu/packages/gnupg.scm| 1 + > > gn

Re: [PATCH] gnu: Add qscintilla.

On Mon, Sep 19, 2016 at 10:47:56AM -0400, Kei Kebreau wrote: > Using > > #:use-module (gnu packages qt) > > and > > (define qscintilla-qt4 > (package > (inherit qscintilla) > ...)) > > gives me an unbound variable error. Any idea what's going wrong here? Can you send the pa

Re: [PATCH 2/2] gnu: python: Add i3-quickswitch.

On Mon, Sep 19, 2016 at 11:24:02AM +0200, Ivan Vilata i Balaguer wrote: > Thanks Leo and Brendan for your comments, I'm writing new versions of > the packages following your suggestions, unfortunately I found out that > ``quickswitch.py`` makes use of the Debian-specific ``which`` tool, so > I'm al

Re: [PATCH 2/2] gnu: python: Add i3-quickswitch.

On Mon, Sep 19, 2016 at 11:28:09AM +0200, Ivan Vilata i Balaguer wrote: > Ivan Vilata i Balaguer (2016-09-19 11:24:02 +0200) wrote: > > > Thanks Leo and Brendan for your comments, I'm writing new versions of > > the packages following your suggestions, unfortunately I found out > > that ``quickswi

Re: [PATCH 2/2] gnu: python: Add i3-quickswitch.

On Mon, Sep 19, 2016 at 08:20:26PM +1000, Brendan Tildesley wrote: > I'm not a fan of "quickswitch-for-i3" and "python-i3-py". Perhaps a > better solution is to ensure "i3-py" in the description or synopsis so > that `guix package -s' finds it. As for quickswitch, isn't the upstream > name also sim

Re: Install FAQ: Only build the non-deterministic packages?

On Mon, Sep 19, 2016 at 11:06:40AM +, ng0 wrote: > Leo Famulari writes: > > Basically, we need someone to be a reproducibility champion in Guix! We > > have all the tools to test reproducibility, but somebody needs to > > implement a system to actually perform the tests

Re: [PATCH] gnu: Add qscintilla.

On Mon, Sep 19, 2016 at 05:45:35PM -0400, Kei Kebreau wrote: > * gnu/packages/qt.scm (qscintilla): New variable. > + (uri (string-append > "mirror://sourceforge/QScintilla2/QScintilla-" > + version "/QScintilla_gpl-" version > ".tar.gz")) This URI r

Ruby / OpenSSL security issue

Ruby users, There is a bug report on Ruby's OpenSSL module regarding IV re-use in AES-GCM mode [0]. Does anyone volunteer to investigate the bug report and decide what to do about it for our Ruby package? [0] http://seclists.org/oss-sec/2016/q3/562 https://github.com/ruby/openssl/issues/49

Re: cracklib: Fix buffer overflow

On Tue, Sep 20, 2016 at 12:32:02PM +0300, Efraim Flashner wrote: > > +diff --git a/src/lib/rules.c b/src/lib/rules.c > > +index d193cc0..3a2aa46 100644 > > +--- a/lib/rules.c > > b/lib/rules.c > > +@@ -434,9 +434,8 @@ Mangle(input, control) /* returns a pointer to > > a controlled Man

Re: [PATCH] gnu: awesome: Update to 3.5.9.

On Fri, Sep 02, 2016 at 12:59:53AM +0200, doncatnip wrote: > Hey Guix ! > > Let's try this again. Okay! > Subject: [PATCH 1/3] gnu: lua: Remove conflicting flag, pass MYCFLAGS > > * gnu/packages/lua.scm (lua)[arguments]: Use MYCFLAGS instead of > CFLAGS and remove conflicting -DLUA_USE_POSIX si

Re: Ruby / OpenSSL security issue

On Tue, Sep 20, 2016 at 03:17:42PM +1000, Ben Woodcroft wrote: > On 20/09/16 12:06, Leo Famulari wrote: > > Ruby users, > > > > There is a bug report on Ruby's OpenSSL module regarding IV re-use in > > AES-GCM mode [0]. > > > > Does anyone volunteer t

Re: [PATCH 1/3] gnu: vlc: Add liba52 as inputs.

On Sat, Sep 10, 2016 at 11:06:16AM +0800, Alex Vong wrote: > Hi, > > I split the patches into 3 parts following David's suggestion. The first > patch removes the old FIXME by adding liba52 as inputs. The second patch > adds some configure flags. The third patch adds many new inputs. > > Regarding

<    1   2   3   4   5   6   7   8   9   10   >