Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 556146 - sys-block/mbuffer-20150412 stabilization
Summary: sys-block/mbuffer-20150412 stabilization
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks:
 
Reported: 2015-07-28 16:46 UTC by Jonas Stein
Modified: 2015-09-06 12:41 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jonas Stein gentoo-dev 2015-07-28 16:46:18 UTC
The author warns on http://www.maier-komor.de/mbuffer.html:
==
Versions 20120505 to 20130209 have a bug that can lead to data corruption if you use multiple outputs or one output with hashing.  
==

I suggest to hardmask and later remove the broken version. It is quite old and newer one is available.


Reproducible: Always
Comment 1 Sebastian Pipping gentoo-dev 2015-07-28 17:28:27 UTC
Nice catch.  Affected versions in Gentoo seem to be:

  20120505
  20121111

My vote for deletion, there would be both newer and older versions left.
@base-system, any objections?
Comment 2 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2015-07-28 17:56:07 UTC
Let's turn this into a stailization bug instead and remove the vulnerable versions now.

Arches please test and mark stable =sys-block/mbuffer-20150412 with target KEYWORDS:

amd64 ppc x86
Comment 3 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2015-07-28 18:00:54 UTC
+  28 Jul 2015; Lars Wendler <polynomial-c@gentoo.org> -mbuffer-20120505.ebuild,
+  -mbuffer-20121111.ebuild:
+  Removed vulnerable versions (see https://bugs.gentoo.org/556146#c0 for the
+  reason).
+
Comment 4 Agostino Sarubbo gentoo-dev 2015-07-31 15:13:23 UTC
amd64 stable
Comment 5 Agostino Sarubbo gentoo-dev 2015-08-02 18:40:13 UTC
x86 stable
Comment 6 Agostino Sarubbo gentoo-dev 2015-09-06 12:41:56 UTC
ppc stable. Closing.