Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 713340 - dev-ada/langkit: depends on vulnerable dev-python/pyyaml
Summary: dev-ada/langkit: depends on vulnerable dev-python/pyyaml
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal blocker (vote)
Assignee: Gentoo Linux ADA team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2017-18342
  Show dependency tree
 
Reported: 2020-03-19 06:23 UTC by Michał Górny
Modified: 2020-03-26 19:50 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-03-19 06:23:54 UTC 
This package is blocking security cleanup of dev-python/pyyaml.
Comment 1 Larry the Git Cow gentoo-dev 2020-03-26 19:50:52 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9581a0b568efbe0f22efde7bf54d66024e159ebc

commit 9581a0b568efbe0f22efde7bf54d66024e159ebc
Author:     Tupone Alfredo <tupone@gentoo.org>
AuthorDate: 2020-03-26 19:50:28 +0000
Commit:     Tupone Alfredo <tupone@gentoo.org>
CommitDate: 2020-03-26 19:50:28 +0000

    dev-ada/langkit: fix usage of pyyaml
    
    Closes: https://bugs.gentoo.org/713340
    Package-Manager: Portage-2.3.89, Repoman-2.3.20
    Signed-off-by: Alfredo Tupone <tupone@gentoo.org>

 dev-ada/langkit/files/langkit-2019-pyyaml.patch | 11 +++++++++++
 dev-ada/langkit/langkit-2018.ebuild             |  8 +++++---
 dev-ada/langkit/langkit-2019.ebuild             |  9 ++++++---
 3 files changed, 22 insertions(+), 6 deletions(-)