922982 – www-client/chromium-121.0.6167.85: stablereq

Bug 922982 - www-client/chromium-121.0.6167.85: stablereq

Summary: www-client/chromium-121.0.6167.85: stablereq

Status:	RESOLVED OBSOLETE

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Stabilization (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Chromium Project

URL:
Whiteboard:
Keywords:	CC-ARCHES, SECURITY

Depends on:	923265
Blocks:	CVE-2024-0804, CVE-2024-0805, CVE-2024-0806, CVE-2024-0807, CVE-2024-0808, CVE-2024-0809, CVE-2024-0810, CVE-2024-0811, CVE-2024-0812, CVE-2024-0813, CVE-2024-0814
	Show dependency tree

Reported:	2024-01-27 03:58 UTC by Matt Jolly
Modified:	2024-01-31 13:00 UTC (History)
CC List:	3 users (show)

See Also:	923008 923010
Package list:	www-client/chromium-121.0.6167.85
Runtime testing required:	No

Flags:	nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Matt Jolly gentoo-dev

2024-01-27 03:58:25 UTC

There are multiple high-severity CVEs fixed by this release; please stabilise.

Comment 1 NATTkA bot gentoo-dev

2024-01-27 04:00:10 UTC Comment hidden (obsolete)

Unable to check for sanity:

> no match for package: www-client/chromium-121.0.6167.85

Comment 2 NATTkA bot gentoo-dev

2024-01-27 07:36:15 UTC Comment hidden (obsolete)

Sanity check failed:

> www-client/chromium-121.0.6167.85
>   bdepend amd64 stable profile default/linux/amd64/17.1 (30 total)
>     dev-lang/rust[profiler]
>   bdepend amd64 dev profile default/linux/amd64/17.1/no-multilib/systemd (3 total)
>     dev-lang/rust[profiler]

Comment 3 Larry the Git Cow gentoo-dev

2024-01-27 08:35:29 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=84db944af3d5e48473c5b59b25fd9b14fe6d2cba

commit 84db944af3d5e48473c5b59b25fd9b14fe6d2cba
Author:     Matt Jolly <Matt.Jolly@footclan.ninja>
AuthorDate: 2024-01-27 08:18:46 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-01-27 08:35:22 +0000

    profiles/base: unmask dev-lang/rust[profiler] for stable
    
    The profiler is required to build chromium >=121.
    
    With the initial justification for masking the USE being
    somewhat flimsy, in the absence of rust maintainers to
    tell us otherwise we'll unmask it for stable
    and deal with any consequences.
    
    Bug: https://bugs.gentoo.org/922982
    Signed-off-by: Matt Jolly <Matt.Jolly@footclan.ninja>
    Closes: https://github.com/gentoo/gentoo/pull/35039
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/base/package.use.stable.mask | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 4 Matt Jolly gentoo-dev

2024-01-31 13:00:31 UTC

Abandoning this stablereq - chasing down some rust-related issues took us until the release of 121.0.6167.139 which has fixed additional high-severity CVEs - I'll file a new ticket for that soon.