#48304 - [PATCH] gnu: expat: Update via graft.

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Message #20 received at 48304@debbugs.gnu.org (full text, mbox, reply):

Received: (at 48304) by debbugs.gnu.org; 9 May 2021 15:23:05 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sun May 09 11:23:05 2021
Received: from localhost ([127.0.0.1]:55843 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lflGr-0000g4-Hj
	for submit@debbugs.gnu.org; Sun, 09 May 2021 11:23:05 -0400
Received: from out4-smtp.messagingengine.com ([66.111.4.28]:42865)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@famulari.name>) id 1lflGo-0000fS-Ji
 for 48304@debbugs.gnu.org; Sun, 09 May 2021 11:23:03 -0400
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
 by mailout.nyi.internal (Postfix) with ESMTP id 86AB55C0045;
 Sun,  9 May 2021 11:22:57 -0400 (EDT)
Received: from mailfrontend1 ([10.202.2.162])
 by compute1.internal (MEProxy); Sun, 09 May 2021 11:22:57 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=0bUFgFjc6m4hjCQ02ItDECsS
 rgPd0MOS+gdROA2ZWKI=; b=pUmlPYm2xAl6cQ5PSRlvlkFU/2261yxOUbrhBsCs
 aKUHfJcmNOEDp0TnY2tRGcckiFOBGFFkb2C5JUolqeulBnGcjZL6piJcRyKL9Htf
 pcCpNpClkUexemdiK5epGwGWP1pusuny6aKwoop8EmqbkG2DyWVSpmktF97g0lck
 XPs=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=0bUFgF
 jc6m4hjCQ02ItDECsSrgPd0MOS+gdROA2ZWKI=; b=KOcFpBU/urC+I9oG+kFGMv
 omrr7J+w5L4iLzkolCMutYYwaRKHoA1n/m5+gnXw007krXvr8+DPVfPMZAAYIrWt
 Ozyv2XmV6UsiJjIdA0CGgDwUD+nnxLOUKMgWEuqRUrKUgC5c4KxUnLXBJknbRAAU
 xrrJWN2ZxeitkVtItcndHoZQUjiRHJidZyswoLs9j+mOu892JMXZT2QdcFXAuRES
 JBX7XGJodRfHFbilmnpUi4xHKb1U/BY0WQxpIX1y/tixvYw36ec+0pflX6W6Bcnk
 AJJEDxa8e7biO9EDF+sVU8z8qebPx2QstqVqAWOIJ1PBEqvmjLTHeiopy15aYUbg
 ==
X-ME-Sender: <xms:UP6XYGyHrNI_rIecC-b5S9_JWeTj0j86VSD38FmgFToAWwke60cX1g>
 <xme:UP6XYCTNpnysh83lU5WlUnb8YJyB8d7Etr2zN_v844vAjhLGG2aFPH-y5Klq815-V
 D8bpQI9vAuTTXJ_MQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdegiedgledtucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh
 rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth
 gvrhhnpeeukeektdffvddtudegjeegtdevhfeufeeivdejiedtieegtdevjedvjeehffev
 gfenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptd
 enucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg
X-ME-Proxy: <xmx:UP6XYIUI5Du60_ByVuSH-n3tTVH2BA9KIywR_ge5UU6E_AI0ZZotHA>
 <xmx:UP6XYMiKPtWe9Mz2HlvOdOl5FGTVp8Jh-EXsqCyNwch5bGCspQe1Lg>
 <xmx:UP6XYICL9JiAOkKpDZeCCO7xcqlGfNADIblshs9EwdPMBYE7W0oAfw>
 <xmx:Uf6XYDrRNVj4ued3otatJ3Hkk__fcRaAAFhAPv0OybD8FLMFTMU11A>
Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net
 [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA;
 Sun,  9 May 2021 11:22:56 -0400 (EDT)
Date: Sun, 9 May 2021 11:22:54 -0400
From: Leo Famulari <leo@famulari.name>
To: Leo Prikler <leo.prikler@student.tugraz.at>
Subject: Re: [bug#48304] [PATCH] gnu: expat: Update via graft.
Message-ID: <YJf+TnQ+DenU++Mx@jasmine.lan>
References: <20210508232729.11557-1-leo.prikler@student.tugraz.at>
 <YJfsLgjGmIf2b8VS@jasmine.lan>
 <829778414d37d154393f014d52c17e58b72aa1ac.camel@telenet.be>
 <276aa14b795b9046b326e5bc0235049a5710c765.camel@student.tugraz.at>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <276aa14b795b9046b326e5bc0235049a5710c765.camel@student.tugraz.at>
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 48304
Cc: 48304@debbugs.gnu.org, Maxime Devos <maximedevos@telenet.be>
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Sun, May 09, 2021 at 04:37:39PM +0200, Leo Prikler wrote:
> Indeed, the mail they dropped over at guix-devel made it seem as though
> not being on 2.3.0 was a security risk already.  The ChangeLog does
> mention some items worth fuzzing over.

In general, all updates are security updates. But we shouldn't / can't
update all core packages with grafts just because. Grafting is a kludge
that doesn't always work as expected (and the problems are hidden), and
it has a high I/O performance cost.

So, let's wait for a security advisory.

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 11:29:33 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#48304 [PATCH] gnu: expat: Update via graft.