Bug 637572 – package upgrade / sync to main-gentoo needed due to GLSA

• Product: Gentoo/Alt
• Status: RESOLVED FIXED

[Description hsk17 2017-11-15 13:19:21 UTC]

some packages with an ebuild local to prefix should be upgraded / synced to main gentoo repo due to glsa:

app-arch/bzip2 -- glsa 201708-08
dev-lang/ruby -- glsa 201710-18
net-misc/wget -- glsa 201711-06

[Comment 1 Fabian Groffen 2017-11-15 15:51:21 UTC]

wget migrated to gx86, which means it's bumped to latest as well

[Comment 2 Larry the Git Cow 2017-11-15 15:51:39 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/proj/prefix.git/commit/?id=ab12f95ca1503bbcf12964e3d4d5673993f422a1

commit ab12f95ca1503bbcf12964e3d4d5673993f422a1
Author:     Fabian Groffen <[e-mail]>
AuthorDate: 2017-11-15 15:31:41 +0000
Commit:     Fabian Groffen <[e-mail]>
CommitDate: 2017-11-15 15:31:41 +0000

    app-arch/bzip2: sync for CVE, bug #637572
    
    Bug: https://bugs.gentoo.org/637572
    Package-Manager: Portage-2.3.13-prefix, Repoman-2.3.4

 app-arch/bzip2/bzip2-1.0.6-r1.ebuild               | 113 -------------------
 app-arch/bzip2/bzip2-1.0.6-r3.ebuild               | 121 ---------------------
 ...bzip2-1.0.6-r7.ebuild => bzip2-1.0.6-r8.ebuild} |  65 +++++------
 .../bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch    |  18 +++
 4 files changed, 43 insertions(+), 274 deletions(-)}

[Comment 3 Larry the Git Cow 2017-11-15 16:40:12 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/proj/prefix.git/commit/?id=a07bcbae9eb5d4d360741bb879a394c736a337ee

commit a07bcbae9eb5d4d360741bb879a394c736a337ee
Author:     Fabian Groffen <[e-mail]>
AuthorDate: 2017-11-15 16:39:23 +0000
Commit:     Fabian Groffen <[e-mail]>
CommitDate: 2017-11-15 16:39:23 +0000

    dev-lang/ruby: sync, bug #637572
    
    Bug: https://bugs.gentoo.org/637572
    Package-Manager: Portage-2.3.13-prefix, Repoman-2.3.4

 dev-lang/ruby/Manifest                             |   6 +-
 .../ruby/{ruby-2.1.5.ebuild => ruby-2.2.8.ebuild}  |  84 ++++---
 dev-lang/ruby/ruby-2.4.2.ebuild                    | 251 +++++++++++++++++++++
 3 files changed, 304 insertions(+), 37 deletions(-)}

[Comment 4 Fabian Groffen 2017-11-15 16:41:24 UTC]

Thanks, I think we're on par now.