FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > EPEL Development

 
 
LinkBack Thread Tools
 
Old 05-19-2011, 07:45 PM
Ville Skyttä
 
Default libmodplug orphaned for real in EPEL

Hello,

libmodplug has been orphaned in EPEL already for a long time. Until now
I have been looking after it there (co-maintaining with the orphan
owner), but because I don't use it on any EL boxes and because there
doesn't seem to be anyone interested in giving feedback even for
security fixes in it, I have now disassociated myself with the EPEL
branches for it in pkgdb and have no plans to touch it in EPEL any longer.

If you're interested, go grab it. There are some security updates in
testing waiting for feedback:

EL-6, CVE-2011-1574, CVE-2011-1761:
https://admin.fedoraproject.org/updates/libmodplug-0.8.8.3-2.el6

EL-5, CVE-2011-1574:
https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.el5

Note that the EL-5 update does not address CVE-2011-1761 which is fixed
in upstream version 0.8.8.3. Updating to it in EL-5 is not an option
I'd consider because it involves a soname bump compared to 0.8.7.
There's a bunch of changes that fix the issue in upstream git between
0.8.8.2 and 0.8.8.3 that I suppose would be backportable to 0.8.7
without causing ABI compatibility issues.

_______________________________________________
epel-devel-list mailing list
epel-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/epel-devel-list
 

Thread Tools




All times are GMT. The time now is 03:19 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org