| Summary: | [TRACKER] Stabilize net-libs/gnutls-2.8.3 [SECURITY FIX] | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Arfrever Frehtes Taifersar Arahesis (RETIRED) <arfrever> |
| Component: | New packages | Assignee: | Crypto team [DISABLED] <crypto+disabled> |
| Status: | RESOLVED FIXED | ||
| Severity: | enhancement | CC: | axiator |
| Priority: | High | Keywords: | STABLEREQ, Tracker |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | 10.0 release | ||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 274181, 274335, 275685, 275699, 275700, 275702, 275703, 275705, 275706, 279426, 281220, 281222, 281249, 283800 | ||
| Bug Blocks: | 281224, 281827 | ||
|
Description
Arfrever Frehtes Taifersar Arahesis (RETIRED)
2009-06-28 15:47:15 UTC
Please stabilize net-libs/gnutls-2.8.2 due to security bug #281224. To avoid bugspam (?) I'll leave arches on here to especially note the other stable bugs on the TODO stack, but maintainer need to fix bug 281249 before this hits stable (and change stable target) Please stabilize net-libs/gnutls-2.8.2-r1. Please stabilize net-libs/gnutls-2.8.3. Stable on alpha. Just a slight concern for #279426 related to this bug. Lftp should be done first I think, but it depends on libtool-2.2 and that bug does not seem ready to go. Thoughts? Rather proceed on gnutls and catchup-up later? (In reply to comment #6) > Rather proceed on gnutls and catchup-up later? Yes. Marked 2.8.3 ppc64 stable but per commment 3, I dont see any 2.8.2 ebuilds in cvs anymore. x86 stable Stable for HPPA. amd64 stable I got this with the update:
QA: install
QA Notice: command not found:
./pkcs1-pad: line 27: datefudge: command not found
Is that of any concern?
(In reply to comment #12) It should be ignored. datefudge isn't available in Gentoo. Making check in pkcs1-padding make[2]: Entering directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' make pkcs1-pad make[3]: Entering directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' make[3]: Nothing to be done for `pkcs1-pad'. make[3]: Leaving directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' make check-TESTS make[3]: Entering directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' ./pkcs1-pad: line 27: datefudge: command not found Cannot fake timestamps, please install datefudge... SKIP: pkcs1-pad ==================== All 0 tests passed (1 test was not run) ==================== make[3]: Leaving directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' make[2]: Leaving directory `/var/tmp/portage/net-libs/gnutls-2.9.5/work/gnutls-2.9.5/tests/pkcs1-padding' arm stable ia64/m68k/s390/sh/sparc stable ppc stable (In reply to comment #16) > ppc stable Please close bugs when you are the last architecture :) . Mistook it for a security bug which should not be closed by arch teams |