Gentoo Archives: gentoo-user

From: Grant <emailgrant@×××××.com>
To: Gentoo mailing list <gentoo-user@l.g.o>
Subject: Re: [gentoo-user] Difficulty fixing GLSA 201512-07 (gstreamer-0.10)
Date: Mon, 04 Jan 2016 15:55:49
Message-Id: CAN0CFw09tJHuah9W4GrzTNhzmkYuj7RVtyHxxzJmbhgaJrzDCg@mail.gmail.com
In Reply to: Re: [gentoo-user] Difficulty fixing GLSA 201512-07 (gstreamer-0.10) by Rich Freeman
1 >>> GLSA 201512-07 requires that I remove gstreamer-0.10 but I'm finding
2 >>> it rather inextricable due to dependencies. Has anyone else run into
3 >>> this problem?
4 >>
5 >> I think this is another case of glsa-check not handling slots correctly.
6 >>
7 >
8 > I believe it handles ranges fine, but it seems that we occasionally
9 > have GLSAs that don't correctly specify ranges. You can log a bug
10 > against it.
11
12
13 I don't see the bug.
14
15 # equery l gstreamer
16 * Searching for gstreamer ...
17 [IP-] [ ] media-libs/gstreamer-0.10.36-r2:0.10
18 [IP-] [ ] media-libs/gstreamer-1.6.2:1.0
19
20 # glsa-check -d 201512-07
21 [snip]
22 Affected package: media-libs/gstreamer
23 Affected archs: All
24 Vulnerable: <1.4.5
25 Unaffected: >=1.4.5
26 [snip]
27
28 What am I missing?
29
30 - Grant