Bug 242426

Summary:	media-video/realplayer-11.0.0.4028-r1 bad file size
Product:	Gentoo Linux	Reporter:	Garrett Holmstrom <gholms>
Component:	Current packages	Assignee:	Gentoo Media-video project <media-video>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	agent59647202, cld71, dsdale24, me, pva, tshchik
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	build.log for media-video/realplayer-11.0.0.4028-r1 Output of ``emerge --info''

Description Garrett Holmstrom 2008-10-17 04:08:34 UTC

When emerging mplayer with USE=real, it attempted to pull in realplayer, but received a file of the wrong size, killing the emerge.  Realplayer is mirror-restricted.

Reproducible: Always

Steps to Reproduce:
1. emerge -av realplayer
Actual Results:  
The realplayer emerge receives a file of the correct name, but of size 8767186 instead of the expected 8631282.  The merge then dies.

See attached build.log for more info.

Expected Results:  
The realplayer emerge should receive a file of size 8631282 and then build successfully.

emerge --info output attached

Comment 1 Garrett Holmstrom 2008-10-17 04:10:09 UTC

Created attachment 168764 [details]
build.log for media-video/realplayer-11.0.0.4028-r1

Comment 2 Garrett Holmstrom 2008-10-17 04:10:39 UTC

Created attachment 168766 [details]
Output of ``emerge --info''

Comment 3 Christopher J. Camisa 2008-10-17 07:16:15 UTC

Supposedly Gentoo rolled out this fix on 09/05/2008.

There is a highly critical security vulnerability which impacts remote system access which media-video/realplayer-11.0.0.4028-r1 addresses.

http://secunia.com/advisories/31756/ describes this update.

The original Gentoo GLSA is here -> http://www.gentoo.org/security/en/glsa/glsa-200809-03.xml

Perhaps bug #232997 should have its status changed and this bug should be marked as a duplicate.

Perhaps this bug should be marked priority P1 or severity Major.

Comment 4 Peter Volkov (RETIRED) gentoo-dev

2008-10-17 09:29:24 UTC

No this is not duplicate. Seems that file was changed upstream and digest should be updated. At least that worked for me but I've installed with -X.

Comment 5 Thomas Chik 2008-10-26 07:01:01 UTC

This is an upstream update to 11.0.1.1056

The ebuild needs an update.
RealPlayer11GOLD.rpm is just pulled from upstream so this comes up when version changes.

Comment 6 Thomas Chik 2008-10-26 07:14:23 UTC

Or I should say the Manifest needs an update.

Comment 7 Jeroen Roovers (RETIRED) gentoo-dev

2008-10-27 17:30:51 UTC

*** Bug 244632 has been marked as a duplicate of this bug. ***

Comment 8 Jeroen Roovers (RETIRED) gentoo-dev

2008-10-27 17:31:05 UTC

*** Bug 244489 has been marked as a duplicate of this bug. ***

Comment 9 Steve Dibb (RETIRED) gentoo-dev

2008-10-28 19:01:49 UTC


*** This bug has been marked as a duplicate of bug 239338 ***