GNU bug report logs - #48000
GStreamer security updates

Previous Next

Package: guix-patches;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Sat, 24 Apr 2021 19:13:02 UTC

Severity: normal

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Leo Famulari <leo <at> famulari.name>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#48000: closed (GStreamer security updates)
Date: Tue, 27 Apr 2021 06:02:02 +0000
[Message part 1 (text/plain, inline)]
Your message dated Tue, 27 Apr 2021 02:01:28 -0400
with message-id <YIeouD6ZGI65mbr7 <at> jasmine.lan>
and subject line Re: [bug#48000] GStreamer security updates
has caused the debbugs.gnu.org bug report #48000,
regarding GStreamer security updates
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
48000: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=48000
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: GStreamer security updates
Date: Sat, 24 Apr 2021 15:12:19 -0400
[Message part 3 (text/plain, inline)]
Here is a patch series to apply some GStreamer security updates.

I tested that all the packages build. Can you recommend some
applications to test?

Some of the upstream bug reports are still private, but I linked to them
from the patch files anyways.
[signature.asc (application/pgp-signature, inline)]
[Message part 5 (message/rfc822, inline)]
From: Leo Famulari <leo <at> famulari.name>
To: Maxime Devos <maximedevos <at> telenet.be>
Cc: 48000-done <at> debbugs.gnu.org
Subject: Re: [bug#48000] GStreamer security updates
Date: Tue, 27 Apr 2021 02:01:28 -0400
[Message part 6 (text/plain, inline)]
On Sun, Apr 25, 2021 at 10:45:53AM +0200, Maxime Devos wrote:
> $ guix refresh --list-dependent gst-plugins-good
> > Building the following 27 packages would ensure 44 dependent packages are rebuilt:
> > gamine <at> 1.6 lollypop <at> 1.4.6 sound-juicer <at> 3.24.0 rhythmbox <at> 3.4.4 parlatype <at> 2.1 cozy <at> 0.7.8
> > telegram-purple <at> 1.4.2 chatty <at> 0.1.17 purple-mattermost <at> 1.2-0.158ce20 bitlbee-purple <at> 3.6
> > pidgin-otr <at> 4.0.2 caja-extensions <at> 1.24.1 nomad <at> 0.2.0-alpha-199-g3e7a475 strawberry <at> 0.9.3
> > pragha <at> 1.3.4 clementine <at> 1.4.0rc1-450-g2725ef99d beets-bandcamp <at> 0.1.3 beets-next <at> 1.4.9-1.04ea754
> > rapid-photo-downloader <at> 0.9.18 gnome <at> 3.34.5 virt-viewer <at> 7.0 vinagre <at> 3.22.0 virt-manager <at> 3.2.0
> > blanket <at> 0.3.1 pitivi <at> 0.999.0-2021.01.0 gaupol <at> 1.9 xfburn <at> 0.6.2
> 
> A selection:
> rhythmbox (a music playing application), nomad (a browser, maybe it supports video playing)
> 
> For more packages:
> $ guix refresh --list-dependent gst-plugins-base
> > [...]
> 
> A selection:
> rage (music and video player), quadrapassal (a game with sound effects), byzanz (desktop
> recording application)

I tested a few applications and pushed as
32db6f504473c118e875f54c6a08b9c6884a3123
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 4 years and 77 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.