Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-12 Thread Grant
>> >> > AFAICT, details of the gstreamer bug itself haven't been made >> >> > public yet, and nobody is sure whether the unmaintained 0.10 >> >> > branch needs a patch. See >> >> > and the >> >> > following comment. >> >> >> >> So everyone is

[gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-11 Thread »Q«
On Thu, 7 Jan 2016 23:45:38 +0100 David Haller wrote: > On Wed, 06 Jan 2016, »Q« wrote: > >On Tue, 5 Jan 2016 08:26:42 -0800 > >Grant wrote: > > > >> > AFAICT, details of the gstreamer bug itself haven't been made > >> > public yet, and nobody is sure

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-07 Thread David Haller
Hello, On Wed, 06 Jan 2016, »Q« wrote: >On Tue, 5 Jan 2016 08:26:42 -0800 >Grant wrote: > >> > AFAICT, details of the gstreamer bug itself haven't been made public >> > yet, and nobody is sure whether the unmaintained 0.10 branch needs a >> > patch. See

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-06 Thread Grant
>> So everyone is just living with the supposed security vulnerability on >> their system? > > It's not clear whether the vulnerability applies to 0.10 or not. I played > safe and uninstalled the only program depending on the 0.0 slot and then > depcleaned. OK so that's where the GLSA bug comes

[gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-06 Thread »Q«
On Tue, 5 Jan 2016 08:26:42 -0800 Grant wrote: > > AFAICT, details of the gstreamer bug itself haven't been made public > > yet, and nobody is sure whether the unmaintained 0.10 branch needs a > > patch. See and > > the

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-06 Thread Mick
On Wednesday 06 Jan 2016 12:27:30 »Q« wrote: > On Tue, 5 Jan 2016 08:26:42 -0800 > > Grant wrote: > > > AFAICT, details of the gstreamer bug itself haven't been made public > > > yet, and nobody is sure whether the unmaintained 0.10 branch needs a > > > patch. See

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-05 Thread Grant
>> >> GLSA 201512-07 requires that I remove gstreamer-0.10 but I'm >> >> finding it rather inextricable due to dependencies. Has anyone >> >> else run into this problem? >> > >> > I think this is another case of glsa-check not handling slots >> > correctly. >> >> I believe it handles ranges fine,

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-05 Thread waltdnes
On Tue, Jan 05, 2016 at 06:36:06AM -0600, »Q« wrote > I couldn't follow everything in the bug linked from c12; I've been > using Firefox latest with gstreamer-1.0 for a while without problems, > but maybe that's because I don't use libav. > > This probably won't affect Pale Moon at all, but

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-05 Thread Neil Bothwick
On Tue, 5 Jan 2016 08:26:42 -0800, Grant wrote: > So everyone is just living with the supposed security vulnerability on > their system? It's not clear whether the vulnerability applies to 0.10 or not. I played safe and uninstalled the only program depending on the 0.0 slot and then depcleaned.

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-05 Thread Alan McKinnon
On 05/01/2016 20:43, waltd...@waltdnes.org wrote: > On Tue, Jan 05, 2016 at 06:36:06AM -0600, »Q« wrote > >> I couldn't follow everything in the bug linked from c12; I've been >> using Firefox latest with gstreamer-1.0 for a while without problems, >> but maybe that's because I don't use libav.

[gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-05 Thread »Q«
On Mon, 4 Jan 2016 14:09:17 -0500 waltd...@waltdnes.org wrote: > On Mon, Jan 04, 2016 at 11:20:57AM -0600, »Q« wrote > > > AFAICT, details of the gstreamer bug itself haven't been made public > > yet, and nobody is sure whether the unmaintained 0.10 branch needs a > > patch. See

Re: [gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-04 Thread waltdnes
On Mon, Jan 04, 2016 at 11:20:57AM -0600, »Q« wrote > AFAICT, details of the gstreamer bug itself haven't been made public > yet, and nobody is sure whether the unmaintained 0.10 branch needs a > patch. See and > the following comment. As

[gentoo-user] Re: Difficulty fixing GLSA 201512-07 (gstreamer-0.10)

2016-01-04 Thread »Q«
On Sun, 3 Jan 2016 11:49:49 -0500 Rich Freeman wrote: > On Sun, Jan 3, 2016 at 11:28 AM, Neil Bothwick > wrote: > > On Sun, 3 Jan 2016 07:52:30 -0800, Grant wrote: > > > >> GLSA 201512-07 requires that I remove gstreamer-0.10 but I'm > >> finding it