See https://git.xiph.org/?p=tremor.git;a=commit;h=562307a4a7082e24553f3d2c55dab397a17c4b4f Tremor doesn't have official releases, we should bump to a new snapshot.
@Maintainer(s), can we apply the patch in URL or ideally just bump it to a newer version given what Hanno said about snapshots?
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9dc346fb2bd5debe6bedfc047255438242505d66 commit 9dc346fb2bd5debe6bedfc047255438242505d66 Author: Sebastian Pipping <sping@gentoo.org> AuthorDate: 2020-03-16 21:04:33 +0000 Commit: Sebastian Pipping <sping@gentoo.org> CommitDate: 2020-03-16 21:04:52 +0000 media-libs/tremor: Fix out-of-bounds write Bug: https://bugs.gentoo.org/650656 Signed-off-by: Sebastian Pipping <sping@gentoo.org> Package-Manager: Portage-2.3.92, Repoman-2.3.20 .../tremor-0_pre20130223-out-of-bounds-write.patch | 88 ++++++++++++++++++++++ media-libs/tremor/tremor-0_pre20130223-r2.ebuild | 50 ++++++++++++ 2 files changed, 138 insertions(+)
@maintainer(s), please advise if ready for stabilisation, or call yourself.
Please advise if there is any issue preventing stabilisation or we'll stabilise in a few days.
No new bugs, stabling...
ppc/ppc64 stable
sparc stable
~hppa is fine
amd64 stable
arm stable
x86 stable
arm64 stable ---- @maintainer(s), please cleanup
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=163e264dd0647897c9f69ddfa3ae3d3cb52e2139 commit 163e264dd0647897c9f69ddfa3ae3d3cb52e2139 Author: Sebastian Pipping <sping@gentoo.org> AuthorDate: 2020-06-07 15:32:30 +0000 Commit: Sebastian Pipping <sping@gentoo.org> CommitDate: 2020-06-07 15:33:53 +0000 media-libs/tremor: Drop vulnerable Bug: https://bugs.gentoo.org/650656 Signed-off-by: Sebastian Pipping <sping@gentoo.org> Package-Manager: Portage-2.3.99, Repoman-2.3.22 media-libs/tremor/tremor-0_pre20130223-r1.ebuild | 44 ------------------------ 1 file changed, 44 deletions(-)
