Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 629198 - net-im/gajim: depends on farstream which depends on vulnerable slot 0.10 from media-libs/gstreamer
Summary: net-im/gajim: depends on farstream which depends on vulnerable slot 0.10 from...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Amadeusz Żołnowski (RETIRED)
URL: https://dev.gajim.org/gajim/gajim/iss...
Whiteboard:
Keywords:
Depends on: 651616 681970
Blocks: gst-0.10-removal
  Show dependency tree
 
Reported: 2017-08-28 16:08 UTC by Christopher Díaz Riveros (RETIRED)
Modified: 2019-04-23 08:36 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christopher Díaz Riveros (RETIRED) gentoo-dev Security 2017-08-28 16:08:15 UTC 
gajim depends on farstream which depends on vulnerable slot 0.10 from media-libs/gstreamer which is going to be removed from tree.

For more info refer to  bug 550648

This bug should not be considered resolved until the previous revisions with dependencies are removed from the tree
Comment 1 Amadeusz Żołnowski (RETIRED) gentoo-dev 2017-11-14 22:43:32 UTC 
It will be fixed on next release.
Comment 2 Mart Raudsepp gentoo-dev 2019-03-09 08:49:44 UTC 
ping. I see new versions, but complete lack of them in Gentoo
Comment 3 Anton Kochkov 2019-03-10 03:29:52 UTC 
It is the last bug preventing from complete gstreamer-0.10 removal from tree. Is there any progress on updating the gajim?
Comment 4 Mart Raudsepp gentoo-dev 2019-03-10 13:34:29 UTC 
I will remove USE=jingle from existing old gajim versions soon, in the same of security.
Comment 5 Mart Raudsepp gentoo-dev 2019-04-23 08:36:58 UTC 
gajim got bumped to 1.0.3 for the time being, and I had removed the gst0.10 using old version with maintainer pre-ack already.