This is the only hammer I know for dealing with module cycles and
effectively fixes, for example, ‘guix show nss’ today.
It's also a very poor solution.
* gnu/packages/certs.scm (nss-certs)[version, source]: Copy verbatim
from the nss package rather than referring to it at the top level.
Reported by several users of #guix.
* gnu/packages/patches/nss-CVE-2021-43527.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/nss.scm (nss/fixed): New variable
(nss)[replacement]: New field.
This is made in an attempt to get rid of non-deterministic test failures,
namely:
[ FAILED ] TlsConnectDatagram13.AeadLimit
* gnu/packages/nss.scm (nss): Update comment about nss-certs. Update to 3.71.
[phases]{check}: Update faketime date.
[inputs]{sqlite}: Use the regular version.
* gnu/packages/certs.scm (nss-certs): Inherit version and source from nss.
* gnu/packages/nss.scm
(nspr)[inputs]: Add 'perl' and 'bash-minimal' when cross-compiling.
(nspr)[arguments]{#:disallowed-references}: Add native 'perl' when
cross-compiling.
...in order to avoid a top-level variable reference. This reverts commit
18c38c1898.
* gnu/packages/certs.scm (nss-certs)[version, source]: Do not inherit from NSS.
* gnu/packages/patches/nss-3.56-pkgconfig.patch: Update and ajdust.
* gnu/packages/patches/nss-increase-test-timeout.patch: Adjust.
* gnu/packages/nss.scm (nss)[version]: Compute with the git-version procedure.
[source]: Switch to use the latest changeset. Adjust snippet to match
restructuring of the source file hierarchy.
[make-flags]: Do not chdir to the "nss" directory.
[phases]: Delete trailing #t.
{check}: Honor the '#:tests?' argument. Update the date used with faketime
and adjust for the new all.sh script location.
{install}: Adapt to the location of the 'dist/' directory, which is now at the
same level as the 'source' checkout.
nss@3.57 includes a critical fix for building on aarch64.
* gnu/packages/nss.scm (nss-3.56): Update to 3.57 and rename to
* nss-3.57.
* gnu/packages/gnuzilla.scm (icedove)[inputs]: Update nss variable name.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Icedove 78 requires nss > 3.53. This version is the only one building
out-of-the-box.
* gnu/packages/nss.scm (nss-3.56): New variable.
* gnu/packages/patches/nss-3.56-pkgconfig.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
Signed-off-by: Mark H Weaver <mhw@netris.org>
The merge preceding this commit ignored the nss replacement added in commit
7bc396bf35. This commit removes the remaining
bits, because the fix is already present in nss@3.52.1.
* gnu/packages/patches/nss-CVE-2020-12399.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/nss.scm (nss/fixed): Remove variable.
The merge preceding this commit ignored the 'replacement' added to nss in
commit 04b33ce205, because the security fix is
already present in NSS 3.48. This commit removes the remaining bits.
* gnu/packages/patches/nss-CVE-2019-11745.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/nss.scm (nss/fixed): Remove variable.
Tobias Geerinckx-Rice
Ludovic Courtès
Ricardo Wurmus
Mark H Weaver
Jonathan Brielmaier
Maxim Cournoyer
Maxime Devos
Marius Bakke
Guillaume Le Vaillant
Marius Bakke
Efraim Flashner