| Summary: | Please stabilize dev-java/jruby-1.4.1 | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Paweł Hajdan, Jr. (RETIRED) <phajdan.jr> |
| Component: | [OLD] Java | Assignee: | Java team <java> |
| Status: | RESOLVED FIXED | ||
| Severity: | enhancement | CC: | dliana, ruby |
| Priority: | High | Keywords: | STABLEREQ |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 295840, 317435, 318153, 320733, 325667, 325669 | ||
| Bug Blocks: | 284294, 318151, 321043, 325695 | ||
|
Description
Paweł Hajdan, Jr. (RETIRED)
2010-04-01 06:01:09 UTC
Maintainer timeout, adding archs. Please hold, seems we need to bump it. http://www.jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability.html Although it seems the problem is in jcodings not jruby itself. 1.4.1 is fine - the source is not different from 1.4.0 but depends on a fixed jcodings jruby requires nailgun but this bug #295840 is a blocker to this one Please also stabilize dev-ruby/rake-0.8.7-r4 when you stabilize jruby. This revision of rake has support for jruby and will be needed to stabilize any additional ruby software. There seems to be some confusion on the ruby side of this bug, so I'm summarizing all of the packages that need to be stabilized. Note that these packages all need to be stabilized together since they are interdependent. We need to include the jruby support in the ruby packages, but obviously this depends on a stable jruby. Working in the following order should keep repoman happy. dev-ruby/rake-0.8.7-r4 dev-ruby/builder-2.1.2-r1 dev-ruby/rubygems-1.3.6-r2 virtual/rubygems-0-r2 dev-ruby/jruby-openssl-0.6-r1 dev-java/jruby-1.4.1 (In reply to comment #6) > There seems to be some confusion on the ruby side of this bug, so I'm > summarizing all of the packages that need to be stabilized. Note that these > packages all need to be stabilized together since they are interdependent. > Working in the following order should keep repoman happy. Thanks for the list, it's really helpful. Please note there are at least two other issues blocking this stabilization: bug #295840 and bug #322195. (In reply to comment #7) > Thanks for the list, it's really helpful. Please note there are at least two > other issues blocking this stabilization: bug #295840 and bug #322195. Tests are restricted in jruby so #322195 is not a blocker for this bug. nailgun ebuild has fixed #295840 so it should no longer be a issue. I will do the reverse if the cjk maintainers don't do it within the next few days amd64 stable x86 stable, closing, thanks everyone! |
