Bug 842843

Summary:	sci-mathematics/gmp-ecm version bump
Product:	Gentoo Linux	Reporter:	François Bissey <frp.bissey>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED FIXED
Severity:	normal	CC:	nicklesteele532
Priority:	Normal	Keywords:	PullRequest
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://github.com/gentoo/gentoo/pull/25341
Whiteboard:
Package list:		Runtime testing required:	---

Description François Bissey 2022-05-05 23:14:27 UTC

A new version of gmp-ecm has been released yesterday (7.0.5).

I am currently testing a branch and will push once everything looks in order.

The new release includes fixes for all the issues requiring patch previously.

The new release has support for cuda but I cannot test it (I currently have an intel card). But the build system for the cuda driver looks far more robust than cholmod for example.

Reproducible: Always

Comment 1 Larry the Git Cow gentoo-dev

2022-05-06 11:44:41 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=99942c6ca1519833a3557de313fff0056788f71f

commit 99942c6ca1519833a3557de313fff0056788f71f
Author:     François Bissey <frp.bissey@gmail.com>
AuthorDate: 2022-05-05 23:31:46 +0000
Commit:     Michael Orlitzky <mjo@gentoo.org>
CommitDate: 2022-05-06 11:42:34 +0000

    sci-mathematics/gmp-ecm: upstream bump
    
    Package-Manager: Portage-3.0.30, Repoman-3.0.3
    Closes: https://bugs.gentoo.org/842843
    Closes: https://github.com/gentoo/gentoo/pull/25341
    Signed-off-by: François René Pierre Bissey <frp.bissey@gmail.com>
    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

 sci-mathematics/gmp-ecm/Manifest             |  1 +
 sci-mathematics/gmp-ecm/gmp-ecm-7.0.5.ebuild | 63 ++++++++++++++++++++++++++++
 sci-mathematics/gmp-ecm/metadata.xml         |  3 ++
 3 files changed, 67 insertions(+)

Comment 2 measrasy 2024-04-24 03:46:09 UTC

Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243 https://geometrydashsubzero.net

"Modules for TCP syslog reception have a heap buffer overflow when octet-counted framing is used. The attacker can corrupt heap values, leading to data integrity issues and availability impact. Remote code execution is unlikely to happen but not impossible."