Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 629204 - www-client/netsurf: depends on vulnerable slot 0.10 from media-libs/gstreamer
Summary: www-client/netsurf: depends on vulnerable slot 0.10 from media-libs/gstreamer
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Michael Weber (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: gst-0.10-removal
  Show dependency tree
 
Reported: 2017-08-28 16:20 UTC by Christopher Díaz Riveros (RETIRED)
Modified: 2018-10-21 20:54 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christopher Díaz Riveros (RETIRED) gentoo-dev Security 2017-08-28 16:20:06 UTC 
netsurf contains dependencies on slot 0.10 from media-libs/gstreamer which is going to be removed from tree.

For more info refer to bug 550648

This bug should not be considered resolved until the previous revisions with dependencies are removed from the tree
Comment 1 Pacho Ramos gentoo-dev 2018-02-13 14:04:08 UTC 
I see 3.7 is still using gst-0.10, hence, we should probably consider disabling NETSURF_USE_VIDEO always
Comment 2 Larry the Git Cow gentoo-dev 2018-10-21 20:54:13 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b5b300aad5b4c95789c941d23b528de6f7bb89e7

commit b5b300aad5b4c95789c941d23b528de6f7bb89e7
Author:     Virgil Dupras <vdupras@gentoo.org>
AuthorDate: 2018-10-21 20:46:40 +0000
Commit:     Virgil Dupras <vdupras@gentoo.org>
CommitDate: 2018-10-21 20:52:56 +0000

    www-client/netsurf: bump to 3.8
    
    I had to drop gstreamer because it depends on a vulnerable version.
    
    Closes: https://bugs.gentoo.org/636224
    Closes: https://bugs.gentoo.org/662230
    Closes: https://bugs.gentoo.org/629204
    Closes: https://bugs.gentoo.org/641846
    Signed-off-by: Virgil Dupras <vdupras@gentoo.org>
    Package-Manager: Portage-2.3.51, Repoman-2.3.11

 www-client/netsurf/Manifest                        |   2 +
 www-client/netsurf/files/netsurf-3.8-CFLAGS.patch  |  79 ++++++++++
 .../netsurf/files/netsurf-3.8-pdf-writer.patch     |  86 +++++++++++
 www-client/netsurf/netsurf-3.8.ebuild              | 163 +++++++++++++++++++++
 4 files changed, 330 insertions(+)