summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Deutschmann <whissi@gentoo.org>2021-01-26 03:56:42 +0100
committerThomas Deutschmann <whissi@gentoo.org>2021-01-26 03:56:42 +0100
commitc62c6ad356b90a9c035e6ac2c40715c5fb63a836 (patch)
tree6ce6d6413b54624bb52b6728766666b3bea37a49
parent[ GLSA 202101-30 ] Qt WebEngine: Multiple vulnerabilities (diff)
downloadgentoo-c62c6ad356b90a9c035e6ac2c40715c5fb63a836.tar.gz
gentoo-c62c6ad356b90a9c035e6ac2c40715c5fb63a836.tar.bz2
gentoo-c62c6ad356b90a9c035e6ac2c40715c5fb63a836.zip
[ GLSA 202101-29 ] Fix version
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
-rw-r--r--glsa-202101-29.xml16
1 files changed, 7 insertions, 9 deletions
diff --git a/glsa-202101-29.xml b/glsa-202101-29.xml
index e923601d055f..5f2c0b02b104 100644
--- a/glsa-202101-29.xml
+++ b/glsa-202101-29.xml
@@ -7,7 +7,7 @@
</synopsis>
<product type="ebuild">openjpeg</product>
<announced>2021-01-26</announced>
- <revised count="1">2021-01-26</revised>
+ <revised count="2">2021-01-26</revised>
<bug>711260</bug>
<bug>718918</bug>
<access>remote</access>
@@ -15,7 +15,7 @@
<package name="media-libs/openjpeg" auto="yes" arch="*">
<unaffected range="ge" slot="2">2.4.0</unaffected>
<vulnerable range="lt" slot="2">2.4.0</vulnerable>
- <vulnerable range="lt" slot="1">*</vulnerable>
+ <vulnerable range="lt" slot="1">1.5.2-r1</vulnerable>
</package>
</affected>
<background>
@@ -40,16 +40,14 @@
# emerge --ask --oneshot --verbose "&gt;=media-libs/openjpeg-2.4.0:2"
</code>
- <p>OpenJPEG 1 has been discontinued and any dependent packages should now
- be using OpenJPEG 2 or have dropped support for the library.
+ <p>Gentoo has discontinued support OpenJPEG 1.x and any dependent packages
+ should now be using OpenJPEG 2 or have dropped support for the library.
+ We recommend that users unmerge OpenJPEG 1.x:
</p>
<code>
- # emerge --sync
- # emerge --ask --oneshot --verbose --depclean
- "&gt;=media-libs/openjpeg:1"
+ # emerge --unmerge "media-libs/openjpeg:1"
</code>
-
</resolution>
<references>
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2018-21010">CVE-2018-21010</uri>
@@ -63,5 +61,5 @@
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2020-27845">CVE-2020-27845</uri>
</references>
<metadata tag="requester" timestamp="2021-01-25T20:17:39Z">sam_c</metadata>
- <metadata tag="submitter" timestamp="2021-01-26T00:15:25Z">sam_c</metadata>
+ <metadata tag="submitter" timestamp="2021-01-26T02:54:20Z">sam_c</metadata>
</glsa>