| Summary: | Stabilization of media-libs/gstreamer-0.10.23, media-libs/gst-plugins-base-0.10.23, dev-python/gst-python-0.10.15-r1 and co | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Mart Raudsepp <leio> |
| Component: | New packages | Assignee: | GStreamer package maintainers <gstreamer> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | security |
| Priority: | High | Keywords: | STABLEREQ |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 281427 | ||
|
Description
Mart Raudsepp
2009-08-10 03:06:53 UTC
Stablization list for amd64, ppc, ppc64, sparc and x86: media-libs/gstreamer-0.10.23 media-libs/gst-plugins-base-0.10.23 media-plugins/gst-plugins-alsa-0.10.23 media-plugins/gst-plugins-cdparanoia-0.10.23 media-plugins/gst-plugins-gio-0.10.23 media-plugins/gst-plugins-gnomevfs-0.10.23 media-plugins/gst-plugins-libvisual-0.10.23 media-plugins/gst-plugins-ogg-0.10.23 media-plugins/gst-plugins-pango-0.10.23 media-plugins/gst-plugins-theora-0.10.23 media-plugins/gst-plugins-v4l-0.10.23 media-plugins/gst-plugins-vorbis-0.10.23 media-plugins/gst-plugins-x-0.10.23 media-plugins/gst-plugins-xvideo-0.10.23 dev-python/gst-python-0.10.15-r1 Stabilization list for alpha, arm, hppa, ia64, sh follows. Some of you have a few of them missing keywords (possibly from missing keywords on dependent libraries), this is noted in parenthesis after the package name. So you can skip it if it's not even keyworded, or you might consider keywording ~arch when possible and desired. gst-plugins-libvisual is missing keywords on all these non-mainstream arches right now: media-libs/gstreamer-0.10.23 media-libs/gst-plugins-base-0.10.23 media-plugins/gst-plugins-alsa-0.10.23 media-plugins/gst-plugins-cdparanoia-0.10.23 (no keywords for arm/sh) media-plugins/gst-plugins-gio-0.10.23 (no keywords for sh) media-plugins/gst-plugins-gnomevfs-0.10.23 media-plugins/gst-plugins-ogg-0.10.23 media-plugins/gst-plugins-pango-0.10.23 media-plugins/gst-plugins-theora-0.10.23 media-plugins/gst-plugins-v4l-0.10.23 (no keywords for arm/ia64/sh) media-plugins/gst-plugins-vorbis-0.10.23 media-plugins/gst-plugins-x-0.10.23 media-plugins/gst-plugins-xvideo-0.10.23 dev-python/gst-python-0.10.15-r1 (no keywords for hppa/sh, mostly only useful for quick scripting and when some python application depends on it) HPPA: I included media-plugins/gst-plugins-v4l-0.10.23 in your list, decide for yourself if you want to introduce a stable keyword for that package or not. If not, just skip that one. Security: Please review the following change in gst-plugins-base-0.10.23 and its security implications. If you find it as a real security item, please do your dance of assigning to yourself (keeping a CC on us), and so on. Found this in a routine review of the commits between previous version and this one.
From gst-plugins-base-0.10.23:
commit 108ead73c866b0f3f6c52ce7b49cc37946a65b5b
Author: Sebastian Dröge
Date: Tue Mar 17 22:53:44 2009 +0100
rtsp: Use GLib base64 functions and deprecate gst_rtsp_base64_encode
This also fixes another instance of CVE-2008-4316.
gst-libs/gst/rtsp/gstrtspbase64.c | 96 +++++++------------------------------
gst-libs/gst/rtsp/gstrtspbase64.h | 3 +
2 files changed, 20 insertions(+), 79 deletions(-)
That CVE item was covered by us in its dev-libs/glib form in bug 249214.
The change can be reviewed online at http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=108ead73c866b0f3f6c52ce7b49cc37946a65b5b
amd64 done x86 stable ppc stable alpha/arm/ia64/sh/sparc stable ppc64 done @hppa: Bump, you will need this for gnome-2.26 stabilization Stable for HPPA. All arches done, closing... |