sys-fs/zfs-0.7.13 (along with sys-kernel/spl ) is no longer maintained and contains known security issues. This bug is to track removal.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8f41bec723fda7d56c431ed14fda7cf2c9990da9 commit 8f41bec723fda7d56c431ed14fda7cf2c9990da9 Author: Georgy Yakovlev <gyakovlev@gentoo.org> AuthorDate: 2020-05-15 03:44:16 +0000 Commit: Georgy Yakovlev <gyakovlev@gentoo.org> CommitDate: 2020-05-15 03:49:41 +0000 profiles/package.mask: mask zfs-0.7.x and co Bug: https://bugs.gentoo.org/686142 Bug: https://bugs.gentoo.org/723120 Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org> profiles/package.mask | 8 ++++++++ 1 file changed, 8 insertions(+)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9d888e47d8e38d2774c59c6a9ddc845f6c640ac8 commit 9d888e47d8e38d2774c59c6a9ddc845f6c640ac8 Author: Mart Raudsepp <leio@gentoo.org> AuthorDate: 2020-05-15 05:00:11 +0000 Commit: Mart Raudsepp <leio@gentoo.org> CommitDate: 2020-05-15 05:00:11 +0000 package.mask: Fix broken zfs p.mask Bug: https://bugs.gentoo.org/723120 Signed-off-by: Mart Raudsepp <leio@gentoo.org> profiles/package.mask | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
Do you have a reference to these known security issues so that people can determine how to balance updating vs risk?
(In reply to Hans de Graaff from comment #3) > Do you have a reference to these known security issues so that people can > determine how to balance updating vs risk? this is the one I meant, probably some others as well, 0.7.x will no longer receive any fixes. https://bugs.gentoo.org/686142 https://github.com/openzfs/zfs/issues/8997 This bug was opened to community/users can reach out and voice opinions. If people still need 0.7.x it can stay, but it's getting old and ugly at this point, so it's a gentle push to upgrade =) I can leave ebuilds masked in the tree for longer if you rely on them, but 0.8.4 is quite good, going to stabilize soon (~2 weeks). I recommend giving it a try in testing environment at least.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=91fef8208f9cdbd860be4cb9aaa46f9fd9d43245 commit 91fef8208f9cdbd860be4cb9aaa46f9fd9d43245 Author: Georgy Yakovlev <gyakovlev@gentoo.org> AuthorDate: 2020-06-10 21:52:10 +0000 Commit: Georgy Yakovlev <gyakovlev@gentoo.org> CommitDate: 2020-06-10 21:53:11 +0000 profiles/package.mask: remove old zfs masks Closes: https://bugs.gentoo.org/723120 Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org> profiles/package.mask | 8 -------- 1 file changed, 8 deletions(-)
