Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 903687 - dev-java/{fop:2.7,batik:1.14}:remove vulnerable batik and reverse dependency
Summary: dev-java/{fop:2.7,batik:1.14}:remove vulnerable batik and reverse dependency
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords: PullRequest
Depends on: 903725
Blocks: CVE-2022-38398, CVE-2022-38648, CVE-2022-40146, CVE-2022-41704, CVE-2022-42890 903600 903672
  Show dependency tree
 
Reported: 2023-04-02 07:01 UTC by Volkmar W. Pogatzki
Modified: 2023-04-05 10:56 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Volkmar W. Pogatzki 2023-04-02 07:01:12 UTC 
remove vulnerable batik and reverse dependency
Comment 1 Larry the Git Cow gentoo-dev 2023-04-05 10:56:20 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f137d0226cf2c7568a4f382add4c533de20c2688

commit f137d0226cf2c7568a4f382add4c533de20c2688
Author:     Volkmar W. Pogatzki <gentoo@pogatzki.net>
AuthorDate: 2023-04-04 20:43:05 +0000
Commit:     Miroslav Šulc <fordfrog@gentoo.org>
CommitDate: 2023-04-05 10:56:07 +0000

    dev-java/batik: drop 1.14-r1
    
    Closes: https://bugs.gentoo.org/903687
    Closes: https://bugs.gentoo.org/903600
    Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net>
    Closes: https://github.com/gentoo/gentoo/pull/30480
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

 dev-java/batik/Manifest                 |   1 -
 dev-java/batik/batik-1.14-r1.ebuild     | 178 --------------------------------
 dev-java/batik/files/batik-1.14-modules |  33 ------
 3 files changed, 212 deletions(-)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f882ffe3f179188bc6c2167453279234574cd7c5

commit f882ffe3f179188bc6c2167453279234574cd7c5
Author:     Volkmar W. Pogatzki <gentoo@pogatzki.net>
AuthorDate: 2023-04-04 20:37:42 +0000
Commit:     Miroslav Šulc <fordfrog@gentoo.org>
CommitDate: 2023-04-05 10:56:07 +0000

    dev-java/fop: drop 2.7
    
    Closes: https://bugs.gentoo.org/903672
    Bug: https://bugs.gentoo.org/903687
    Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net>
    Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

 dev-java/fop/Manifest       |   1 -
 dev-java/fop/fop-2.7.ebuild | 158 --------------------------------------------
 2 files changed, 159 deletions(-)