877289 – media-libs/libjxl-0.7.0_pre20220825 stabilisation

Bug 877289 - media-libs/libjxl-0.7.0_pre20220825 stabilisation

Summary: media-libs/libjxl-0.7.0_pre20220825 stabilisation

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Stabilization (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Daniel Novomeský

URL:
Whiteboard:
Keywords:	CC-ARCHES, SECURITY, STABLEREQ

Depends on:
Blocks:	CVE-2022-34000 861797 877015
	Show dependency tree

Reported:	2022-10-16 08:51 UTC by Andreas Sturmlechner
Modified:	2022-10-25 18:36 UTC (History)
CC List:	1 user (show)

See Also:
Package list:	media-libs/libjxl-0.7.0_pre20220825 dev-cpp/highway-1.0.1-r1
Runtime testing required:	---

Flags:	nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Andreas Sturmlechner gentoo-dev

2022-10-16 08:51:29 UTC

Arches please do your magic.

Comment 1 NATTkA bot gentoo-dev

2022-10-16 08:56:25 UTC Comment hidden (obsolete)

Sanity check failed:

> media-libs/libjxl-0.7.0_pre20220825
>   depend amd64 dev profile default/linux/amd64/17.0/musl (3 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_64(-)]
>   depend amd64 dev profile default/linux/amd64/17.0/x32 (1 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-),abi_x86_64(-),abi_x86_x32(-)]
>   depend amd64 stable profile default/linux/amd64/17.1 (15 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-),abi_x86_64(-)]
>   depend amd64 stable profile default/linux/amd64/17.1/no-multilib (3 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_64(-)]
>   rdepend amd64 dev profile default/linux/amd64/17.0/musl (3 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_64(-)]
>   rdepend amd64 dev profile default/linux/amd64/17.0/x32 (1 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-),abi_x86_64(-),abi_x86_x32(-)]
>   rdepend amd64 stable profile default/linux/amd64/17.1 (15 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-),abi_x86_64(-)]
>   rdepend amd64 stable profile default/linux/amd64/17.1/no-multilib (3 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_64(-)]
>   depend arm stable profile default/linux/arm/17.0 (53 total)
>     >=dev-cpp/highway-1.0.0
>   depend arm dev profile default/linux/arm/17.0/armv4 (45 total)
>     >=dev-cpp/highway-1.0.0
>   rdepend arm stable profile default/linux/arm/17.0 (53 total)
>     >=dev-cpp/highway-1.0.0
>   rdepend arm dev profile default/linux/arm/17.0/armv4 (45 total)
>     >=dev-cpp/highway-1.0.0
>   depend x86 stable profile default/linux/x86/17.0 (13 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-)]
>   depend x86 dev profile default/linux/x86/17.0/musl (1 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-)]
>   rdepend x86 stable profile default/linux/x86/17.0 (13 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-)]
>   rdepend x86 dev profile default/linux/x86/17.0/musl (1 total)
>     >=dev-cpp/highway-1.0.0[abi_x86_32(-)]

Comment 2 NATTkA bot gentoo-dev

2022-10-16 09:00:19 UTC

All sanity-check issues have been resolved

Comment 3 Arthur Zamarin archtester

2022-10-16 15:52:54 UTC

sparc done

Comment 4 Joonas Niilola gentoo-dev

2022-10-17 05:15:44 UTC

amd64 done

Comment 5 Joonas Niilola gentoo-dev

2022-10-17 05:27:00 UTC

x86 done

Comment 6 Arthur Zamarin archtester

2022-10-17 05:28:23 UTC

ppc done

Comment 7 Agostino Sarubbo gentoo-dev

2022-10-17 06:44:31 UTC

arm64 done

Comment 8 Agostino Sarubbo gentoo-dev

2022-10-17 06:45:24 UTC

ppc64 done

Comment 9 Arthur Zamarin archtester

2022-10-25 18:34:54 UTC

arm done

all arches done

Comment 10 Larry the Git Cow gentoo-dev

2022-10-25 18:36:34 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fd0852f1ac20aff34f61d14ecd934b511ddd11c1

commit fd0852f1ac20aff34f61d14ecd934b511ddd11c1
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2022-10-25 18:35:49 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2022-10-25 18:36:10 +0000

    media-libs/libjxl: drop vulnerable 0.7.0_pre20220329
    
    Bug: https://bugs.gentoo.org/877289
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 media-libs/libjxl/Manifest                        |  1 -
 media-libs/libjxl/libjxl-0.7.0_pre20220329.ebuild | 80 -----------------------
 2 files changed, 81 deletions(-)