861530 – media-libs/dav1d: stabilization

Bug 861530 - media-libs/dav1d: stabilization

Summary: media-libs/dav1d: stabilization

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Stabilization (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Mozilla Gentoo Team

URL:
Whiteboard:
Keywords:	CC-ARCHES, SECURITY

Depends on:	835807
Blocks:	CVE-2022-2505, CVE-2022-36315, CVE-2022-36316, CVE-2022-36320 861797 865341
	Show dependency tree

Reported:	2022-07-27 17:39 UTC by Matt Turner
Modified:	2022-08-16 01:10 UTC (History)
CC List:	3 users (show)

See Also:
Package list:	media-libs/dav1d-1.0.0 media-libs/libheif-1.12.0-r2 amd64 arm arm64 ppc64 x86 mail-client/thunderbird-91.12.0 amd64 x86 www-client/firefox-91.12.0 amd64 arm64 x86
Runtime testing required:	---

Flags:	nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Matt Turner gentoo-dev

2022-07-27 17:39:05 UTC

lu_zero gave the okay for stabilizing dav1d-1.0.0, which is a different subslot from the current stable, so it would be nice to stabilize it at the same time as a firefox stabilization (maybe with v91.12.0?).

I have some concerns about stabilizing dav1d-1.0.0 with bugs blocking 835807 still open, so marking it as a blocker.

Comment 1 Joonas Niilola gentoo-dev

2022-07-28 05:33:43 UTC

Ack, luckily the security issues don't look that bad this time around so I'm fine waiting a bit until #836205 is fixed.

Comment 2 Matt Turner gentoo-dev

2022-07-28 18:42:03 UTC

Adding libheif compatible with dav1d-1.0.0 to the stabilization list.

Comment 3 Matt Turner gentoo-dev

2022-07-29 20:30:26 UTC

jsmolic gave his ack on IRC, so juippis: you may fire when ready!

Comment 4 Arthur Zamarin archtester

2022-07-30 09:50:39 UTC

ppc done

Comment 5 Joonas Niilola gentoo-dev

2022-08-01 17:40:18 UTC

amd64 done

Comment 6 Joonas Niilola gentoo-dev

2022-08-01 17:40:54 UTC

x86 done

Comment 7 Matt Turner gentoo-dev

2022-08-12 15:34:57 UTC

arm/arm64/ppc64: ping

Comment 8 ernsteiswuerfel archtester

2022-08-14 10:10:54 UTC

Problem on ppc64 is that libheif fails builds with USE='go' (see bug #865143).

Comment 9 Sam James archtester

2022-08-16 00:28:16 UTC

(In reply to Matt Turner from comment #7)
> arm/arm64/ppc64: ping

doing arm/arm64 now, but not got time to look into the ppc64 issue mentioned

Comment 10 Sam James archtester

2022-08-16 00:39:47 UTC

arm done

Comment 11 Sam James archtester

2022-08-16 01:08:40 UTC

arm64 done

Comment 12 Sam James archtester

2022-08-16 01:10:26 UTC

ppc64 done

all arches done

Comment 13 Sam James archtester

2022-08-16 01:10:54 UTC

(In reply to ernsteiswuerfel from comment #8)
> Problem on ppc64 is that libheif fails builds with USE='go' (see bug
> #865143).

It works for me and it's a more generic Go issue I guess, so not blocked stabilisation for libheif here.