| Summary: | =dev-scheme/racket-6.9: version bump | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Taahir Ahmed <ahmed.taahir> |
| Component: | Current packages | Assignee: | Scheme Project <scheme> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | ||
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
|
Description
Taahir Ahmed
2017-03-26 17:19:57 UTC
Racket version 6.9 is now availabled with vulnerability fixed. --- Security Announcement: A security vulnerability in the `racket/sandbox` library and Typed Racket allowed malicious Typed Racket code to escape the sandbox. This vulnerability has been fixed in Racket version 6.9. Anyone using `racket/sandbox` to execute untrustworthy code with access to Typed Racket should upgrade to version 6.9 immediately. author Michael Orlitzky <mjo@gentoo.org> 2017-05-11 08:18:30 -0400 committer Michael Orlitzky <mjo@gentoo.org> 2017-05-11 08:55:37 -0400 commit a710d534973360bae165a2d45cde301dd9956c70 dev-scheme/racket: new (masked) version 6.9 with permission from amynka. This new ebuild comes with a lot of fixes: 1. Dropped the unused eutils eclass. 2. Updated the LICENSE to LGPL-3 from LGPL-2 (upstream change). I've also included GPL-3+ in there, because I see some plain-GPLed code in the source tree. 3. Added some missing dependencies, and a comment mentioning why they're needed. This includes pango per bug 486016. 4. Added a blocker on dev-tex/slatex to avoid file collisions. This is bug 547398, and the solution isn't entirely satisfactory, so I've left a comment explaining what I know. 5. Added --disable-strip to the configure flags to avoid some QA warnings. 6. Changed a few "make" commands that are used with USE=jit, to ensure that two executables are pax-marked before they're used. Along with some commands to pax-mark the installed binaries, this fixes bug 613634. 7. Removed the *.desktop file DESTDIR mangling; it looks like whatever problem this solved has been fixed upstream. However, this new ebuild comes with one new problem: 1. The build randomly crashes with racketcgc segfaults. This seems to only happen with USE=jit. I've filed a bug upstream at http://bugs.racket-lang.org/query/?cmd=view&pr=15433, but even changing the GC doesn't appear to fix it. I get a different backtrace, but it's always racketcgc that segfaults. I'm not sure what to do about this (mask the "jit" flag?), so this new ebuild is committed package.masked. Gentoo-Bug: 486016 Gentoo-Bug: 547398 Gentoo-Bug: 613634 Gentoo-Bug: 613918 Package-Manager: Portage-2.3.3, Repoman-2.3.1 |
