Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 905797 - dev-libs/protobuf-3.{19.6,20.3}: stablereq
Summary: dev-libs/protobuf-3.{19.6,20.3}: stablereq
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Arfrever Frehtes Taifersar Arahesis
URL:
Whiteboard:
Keywords: PullRequest, SECURITY, STABLEREQ
Depends on:
Blocks: CVE-2022-1941
  Show dependency tree
 
Reported: 2023-05-06 07:42 UTC by Volkmar W. Pogatzki
Modified: 2023-06-27 20:15 UTC (History)
2 users (show)

See Also:
Package list:
dev-libs/protobuf-3.19.6 * dev-libs/protobuf-3.20.3 *
Runtime testing required: ---
nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Volkmar W. Pogatzki 2023-05-06 07:42:04 UTC 
Please stabilize
Comment 1 Andreas Sturmlechner gentoo-dev 2023-06-27 12:22:26 UTC 
Maintainer timeout, I guess, but do we still need that after 21.9 was stabilised in bug 879971?
Comment 2 Volkmar W. Pogatzki 2023-06-27 14:43:46 UTC 
(In reply to Andreas Sturmlechner from comment #1)
> Maintainer timeout, I guess, but do we still need that after 21.9 was
> stabilised in bug 879971?

Maybe better to simply remove {3.19.3,3.19.6,3.20.1-r1,3.20.3,21.8} in order to proceed with CVE-2022-1941.
Comment 3 Larry the Git Cow gentoo-dev 2023-06-27 20:14:53 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7ff3e7e2d1447f4377cdeb6824f1563aa79a560e

commit 7ff3e7e2d1447f4377cdeb6824f1563aa79a560e
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2023-06-27 19:40:24 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2023-06-27 20:14:35 +0000

    dev-libs/protobuf: drop 3.19.3, 3.19.6, 3.20.1-r1, 3.20.3, 21.8
    
    Bug: https://bugs.gentoo.org/905797
    Bug: https://bugs.gentoo.org/872434
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 dev-libs/protobuf/Manifest                         |   5 -
 ...protobuf-3.16.0-protoc_input_output_files.patch | 240 ---------------------
 dev-libs/protobuf/protobuf-21.8.ebuild             | 148 -------------
 dev-libs/protobuf/protobuf-3.19.3.ebuild           | 146 -------------
 dev-libs/protobuf/protobuf-3.19.6.ebuild           | 151 -------------
 dev-libs/protobuf/protobuf-3.20.1-r1.ebuild        | 143 ------------
 dev-libs/protobuf/protobuf-3.20.3.ebuild           | 148 -------------
 7 files changed, 981 deletions(-)