Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 637572 - package upgrade / sync to main-gentoo needed due to GLSA
Summary: package upgrade / sync to main-gentoo needed due to GLSA
Status: RESOLVED FIXED
Alias: None
Product: Gentoo/Alt
Classification: Unclassified
Component: Prefix Support (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Prefix
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-11-15 13:19 UTC by hsk17
Modified: 2017-11-15 16:41 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description hsk17 2017-11-15 13:19:21 UTC
some packages with an ebuild local to prefix should be upgraded / synced to main gentoo repo due to glsa:

app-arch/bzip2 -- glsa 201708-08
dev-lang/ruby -- glsa 201710-18
net-misc/wget -- glsa 201711-06
Comment 1 Fabian Groffen gentoo-dev 2017-11-15 15:51:21 UTC
wget migrated to gx86, which means it's bumped to latest as well
Comment 2 Larry the Git Cow gentoo-dev 2017-11-15 15:51:39 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/proj/prefix.git/commit/?id=ab12f95ca1503bbcf12964e3d4d5673993f422a1

commit ab12f95ca1503bbcf12964e3d4d5673993f422a1
Author:     Fabian Groffen <grobian@gentoo.org>
AuthorDate: 2017-11-15 15:31:41 +0000
Commit:     Fabian Groffen <grobian@gentoo.org>
CommitDate: 2017-11-15 15:31:41 +0000

    app-arch/bzip2: sync for CVE, bug #637572
    
    Bug: https://bugs.gentoo.org/637572
    Package-Manager: Portage-2.3.13-prefix, Repoman-2.3.4

 app-arch/bzip2/bzip2-1.0.6-r1.ebuild               | 113 -------------------
 app-arch/bzip2/bzip2-1.0.6-r3.ebuild               | 121 ---------------------
 ...bzip2-1.0.6-r7.ebuild => bzip2-1.0.6-r8.ebuild} |  65 +++++------
 .../bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch    |  18 +++
 4 files changed, 43 insertions(+), 274 deletions(-)}
Comment 3 Larry the Git Cow gentoo-dev 2017-11-15 16:40:12 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/proj/prefix.git/commit/?id=a07bcbae9eb5d4d360741bb879a394c736a337ee

commit a07bcbae9eb5d4d360741bb879a394c736a337ee
Author:     Fabian Groffen <grobian@gentoo.org>
AuthorDate: 2017-11-15 16:39:23 +0000
Commit:     Fabian Groffen <grobian@gentoo.org>
CommitDate: 2017-11-15 16:39:23 +0000

    dev-lang/ruby: sync, bug #637572
    
    Bug: https://bugs.gentoo.org/637572
    Package-Manager: Portage-2.3.13-prefix, Repoman-2.3.4

 dev-lang/ruby/Manifest                             |   6 +-
 .../ruby/{ruby-2.1.5.ebuild => ruby-2.2.8.ebuild}  |  84 ++++---
 dev-lang/ruby/ruby-2.4.2.ebuild                    | 251 +++++++++++++++++++++
 3 files changed, 304 insertions(+), 37 deletions(-)}
Comment 4 Fabian Groffen gentoo-dev 2017-11-15 16:41:24 UTC
Thanks, I think we're on par now.