guix/gnu, branch nckx-patch-1 Transactional package manager, declarative GNU/Linux distribution, reproducible deployment tool, and more! https://guix.gnu.org revert 7e7487166b02aa41d42e96a1dfccaceda7fefc12 2026-03-29T11:12:19+00:00 nckx me@tobias.gr 2026-03-29T11:12:19+00:00 9ea6ba31b92ca2e20cf41ca40860178da5838104 Since commit 7e7487166b02aa41d42e96a1dfccaceda7fefc12, Guix System treats devices starting with "/dev/" as special and won't even try to mount them if the whole string isn't an existing file name. This strict naming policy is (AFAIK?) Guix-specific and breaks things like booting multi-device bcachefs file systems: waiting for partition '/dev/sda1:/dev/sdb1' to appear... waiting for partition '/dev/sda1:/dev/sdb1' to appear... …ad infinitum until crashing to a Guile prompt. Guix must not enforce custom naming policies like this. On the contrary: we should defer mounting to the kernel whenever possible, and handle failures only when they occur. We can still delay mounts, retry failed mounts, and try to set up favourable mount conditions based on what we think the mount(2) SOURCE looks like, without adding our own arbitrary rules. 
Since commit 7e7487166b02aa41d42e96a1dfccaceda7fefc12, Guix System treats devices starting with "/dev/" as special and won't even try to mount them if the whole string isn't an existing file name.

This strict naming policy is (AFAIK?) Guix-specific and breaks things like booting multi-device bcachefs file systems:

  waiting for partition '/dev/sda1:/dev/sdb1' to appear...
  waiting for partition '/dev/sda1:/dev/sdb1' to appear...

…ad infinitum until crashing to a Guile prompt.

Guix must not enforce custom naming policies like this. On the contrary: we should defer mounting to the kernel whenever possible, and handle failures only when they occur.

We can still delay mounts, retry failed mounts, and try to set up favourable mount conditions based on what we think the mount(2) SOURCE looks like, without adding our own arbitrary rules.
gnu: librewolf: Update to 149.0-1 [security-fixes]. 2026-03-29T04:57:43+00:00 moksh mysticmoksh@riseup.net 2026-03-26T09:27:45+00:00 21946173a05869dd40a38012e65b9e35dc47a9fc * gnu/packages/librewolf.scm (librewolf): Update to 149.0-1. Contains fixes for: CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component CVE-2026-4685: Incorrect boundary conditions in the Graphics: Canvas2D component CVE-2026-4686: Incorrect boundary conditions in the Graphics: Canvas2D component CVE-2026-4687: Sandbox escape due to incorrect boundary conditions in the Telemetry component CVE-2026-4688: Sandbox escape due to use-after-free in the Disability Access APIs component CVE-2026-4689: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component CVE-2026-4690: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component CVE-2026-4691: Use-after-free in the CSS Parsing and Computation component CVE-2026-4692: Sandbox escape in the Responsive Design Mode component CVE-2026-4693: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component CVE-2026-4695: Incorrect boundary conditions in the Audio/Video: Web Codecs component CVE-2026-4696: Use-after-free in the Layout: Text and Fonts component CVE-2026-4697: Incorrect boundary conditions in the Audio/Video: Web Codecs component CVE-2026-4698: JIT miscompilation in the JavaScript Engine: JIT component CVE-2026-4699: Incorrect boundary conditions in the Layout: Text and Fonts component CVE-2026-4700: Mitigation bypass in the Networking: HTTP component CVE-2026-4701: Use-after-free in the JavaScript Engine component CVE-2026-4722: Privilege escalation in the IPC component CVE-2026-4702: JIT miscompilation in the JavaScript Engine component CVE-2026-4723: Use-after-free in the JavaScript Engine component CVE-2026-4724: Undefined behavior in the Audio/Video component CVE-2026-4704: Denial-of-service in the WebRTC: Signaling component CVE-2026-4705: Undefined behavior in the WebRTC: Signaling component CVE-2026-4706: Incorrect boundary conditions in the Graphics: Canvas2D component CVE-2026-4707: Incorrect boundary conditions in the Graphics: Canvas2D component CVE-2026-4708: Incorrect boundary conditions in the Graphics component CVE-2026-4709: Incorrect boundary conditions in the Audio/Video: GMP component CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component CVE-2026-4711: Use-after-free in the Widget: Cocoa component CVE-2026-4725: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2026-4712: Information disclosure in the Widget: Cocoa component CVE-2026-4713: Incorrect boundary conditions in the Graphics component CVE-2026-4714: Incorrect boundary conditions in the Audio/Video component CVE-2026-4715: Uninitialized memory in the Graphics: Canvas2D component CVE-2026-4716: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component CVE-2026-4717: Privilege escalation in the Netmonitor component CVE-2026-4726: Denial-of-service in the XML component CVE-2025-59375: Denial-of-service in the XML component CVE-2026-4727: Denial-of-service in the Libraries component in NSS CVE-2026-4728: Spoofing issue in the Privacy: Anti-Tracking component CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component CVE-2026-4719: Incorrect boundary conditions in the Graphics: Text component CVE-2026-4720: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 CVE-2026-4729: Memory safety bugs fixed in Firefox 149 and Thunderbird 149 CVE-2026-4721: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and hunderbird 149 Change-Id: I40e76bf852087d71f8df869103c846032e8552c9 Signed-off-by: Ian Eure <ian@retrospec.tv> 
* gnu/packages/librewolf.scm (librewolf): Update to 149.0-1.

Contains fixes for:
CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component
CVE-2026-4685: Incorrect boundary conditions in the Graphics: Canvas2D component
CVE-2026-4686: Incorrect boundary conditions in the Graphics: Canvas2D component
CVE-2026-4687: Sandbox escape due to incorrect boundary conditions in the Telemetry component
CVE-2026-4688: Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-4689: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVE-2026-4690: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
CVE-2026-4691: Use-after-free in the CSS Parsing and Computation component
CVE-2026-4692: Sandbox escape in the Responsive Design Mode component
CVE-2026-4693: Incorrect boundary conditions in the Audio/Video: Playback component
CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component
CVE-2026-4695: Incorrect boundary conditions in the Audio/Video: Web Codecs component
CVE-2026-4696: Use-after-free in the Layout: Text and Fonts component
CVE-2026-4697: Incorrect boundary conditions in the Audio/Video: Web Codecs component
CVE-2026-4698: JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-4699: Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-4700: Mitigation bypass in the Networking: HTTP component
CVE-2026-4701: Use-after-free in the JavaScript Engine component
CVE-2026-4722: Privilege escalation in the IPC component
CVE-2026-4702: JIT miscompilation in the JavaScript Engine component
CVE-2026-4723: Use-after-free in the JavaScript Engine component
CVE-2026-4724: Undefined behavior in the Audio/Video component
CVE-2026-4704: Denial-of-service in the WebRTC: Signaling component
CVE-2026-4705: Undefined behavior in the WebRTC: Signaling component
CVE-2026-4706: Incorrect boundary conditions in the Graphics: Canvas2D component
CVE-2026-4707: Incorrect boundary conditions in the Graphics: Canvas2D component
CVE-2026-4708: Incorrect boundary conditions in the Graphics component
CVE-2026-4709: Incorrect boundary conditions in the Audio/Video: GMP component
CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component
CVE-2026-4711: Use-after-free in the Widget: Cocoa component
CVE-2026-4725: Sandbox escape due to use-after-free in the Graphics: Canvas2D component
CVE-2026-4712: Information disclosure in the Widget: Cocoa component
CVE-2026-4713: Incorrect boundary conditions in the Graphics component
CVE-2026-4714: Incorrect boundary conditions in the Audio/Video component
CVE-2026-4715: Uninitialized memory in the Graphics: Canvas2D component
CVE-2026-4716: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
CVE-2026-4717: Privilege escalation in the Netmonitor component
CVE-2026-4726: Denial-of-service in the XML component
CVE-2025-59375: Denial-of-service in the XML component
CVE-2026-4727: Denial-of-service in the Libraries component in NSS
CVE-2026-4728: Spoofing issue in the Privacy: Anti-Tracking component
CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component
CVE-2026-4719: Incorrect boundary conditions in the Graphics: Text component
CVE-2026-4720: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
CVE-2026-4729: Memory safety bugs fixed in Firefox 149 and Thunderbird 149
CVE-2026-4721: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and
hunderbird 149

Change-Id: I40e76bf852087d71f8df869103c846032e8552c9
Signed-off-by: Ian Eure <ian@retrospec.tv>
gnu/packages/librewolf: firefox-l10n: Update to d1394212aed0ce0063c0f818aa236e7d4f955ac9. 2026-03-29T04:57:39+00:00 moksh mysticmoksh@riseup.net 2026-03-26T08:36:39+00:00 23fb319fddcdeb4b105d32447f463ffdf70cda70 * gnu/packages/librewolf.scm (firefox-l10n): Update to d1394212aed0ce0063c0f818aa236e7d4f955ac9. Change-Id: I7e152e1f384d7499aa4a368ca8b20d829d1a69ae Signed-off-by: Ian Eure <ian@retrospec.tv> 
* gnu/packages/librewolf.scm (firefox-l10n): Update to d1394212aed0ce0063c0f818aa236e7d4f955ac9.

Change-Id: I7e152e1f384d7499aa4a368ca8b20d829d1a69ae
Signed-off-by: Ian Eure <ian@retrospec.tv>
gnu: libdecaf: Fix build on python@3.12. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-26T09:22:14+00:00 7073c9a1249a0e9d78448ebf8ad4e37928e5f4c7 * gnu/packages/crypto.scm (libdecaf)[native-inputs]: Add python-setuptools. Change-Id: Icc4da08867cba0f3cba93d50eee8ab8302061112 Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/crypto.scm (libdecaf)[native-inputs]: Add
python-setuptools.

Change-Id: Icc4da08867cba0f3cba93d50eee8ab8302061112
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: libapparmor: Fix build on python@3.12. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-25T20:04:04+00:00 5da6907190b1a09ddf7c5ac69d1cdbfbe0d5b236 * gnu/packages/apparmor.scm (libapparmor)[native-inputs]: Add python-setuptools. Change-Id: I47d613f34024accf2f987a230517d773790ba35f Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/apparmor.scm (libapparmor)[native-inputs]: Add
python-setuptools.

Change-Id: I47d613f34024accf2f987a230517d773790ba35f
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: python-pytest-mypy-plugins: Update to 4.0.0. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-25T19:57:26+00:00 f0db9f5b357f896a37a1f763735506a89f4e68cd * gnu/packages/check.scm (python-pytest-mypy-plugins): Update to 4.0.0. [source]: Switch to git-fetch. [arguments]<#:test-flags>: Refresh failing tests. [native-inputs]: Remove python-wheel. Change-Id: I323658c2e4f9fc8aec0f4234dd9fbb4ed326e6dd Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/check.scm (python-pytest-mypy-plugins): Update to 4.0.0.
[source]: Switch to git-fetch.
[arguments]<#:test-flags>: Refresh failing tests.
[native-inputs]: Remove python-wheel.

Change-Id: I323658c2e4f9fc8aec0f4234dd9fbb4ed326e6dd
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: python-pysam: Update to 0.23.3. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-25T18:51:40+00:00 c8bc423b874a9b5abd7804be4d96d9d4a24f3023 * gnu/packages/bioinformatics.scm (python-pysam): Update to 0.23.3. [native-inputs]: Replace python-cython-0 by python-cython. Remove python-wheel. Change-Id: I4e93e7ab1a9e763d2d84b6b7601a64e918b0eda8 Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/bioinformatics.scm (python-pysam): Update to 0.23.3.
[native-inputs]: Replace python-cython-0 by python-cython.  Remove
python-wheel.

Change-Id: I4e93e7ab1a9e763d2d84b6b7601a64e918b0eda8
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: liblouis: Fix build on python@3.12. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-25T17:14:32+00:00 31affbfd60e9eb0588f1176b73a7c23cb3832947 * gnu/packages/language.scm (liblouis)[native-inputs]: Add python-setuptools. Change-Id: Ie6956443ed44b70e8d1a844b3e9b66a2dddb2810 Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/language.scm (liblouis)[native-inputs]: Add
python-setuptools.

Change-Id: Ie6956443ed44b70e8d1a844b3e9b66a2dddb2810
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: python-fb-re2: Fix tests for python@3.12. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-24T07:26:39+00:00 2c7ee93beb92f4a9d8b74b10c44cd4e0f5ef1c98 * gnu/packages/python-xyz.scm (python-fb-re2)[arguments] <#:phases>: Add phase 'fix-tests. Change-Id: I0bf9d7a7e6a5101455f4cbdec0268160667da3ea Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/python-xyz.scm (python-fb-re2)[arguments]
<#:phases>: Add phase 'fix-tests.

Change-Id: I0bf9d7a7e6a5101455f4cbdec0268160667da3ea
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
gnu: python-pypa-installer: Deprecate aliased python-installer. 2026-03-28T22:00:01+00:00 Nicolas Graves ngraves@ngraves.fr 2026-03-22T21:13:17+00:00 3050f813011533ff7f8ed364bf9093110ec568f5 * gnu/packages/python-build.scm (python-pypa-installer): Drop variable, and redefine it as a deprecated version of python-installer. Change-Id: I97467c9832eb7e23ffe67aea90fbf017864f312b Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com> 
* gnu/packages/python-build.scm (python-pypa-installer): Drop
variable, and redefine it as a deprecated version of python-installer.

Change-Id: I97467c9832eb7e23ffe67aea90fbf017864f312b
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>