GNU bug report logs - #74176
[PATCH] gnu: libvpx: Update to 1.15.0.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 74176 in the body.
You can then email your comments to 74176 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: ashish.is <at> lostca.se
To: guix-patches <at> gnu.org
Cc: Ashish SHUKLA <ashish.is <at> lostca.se>
Subject: [PATCH] gnu: libvpx: Update to 1.15.0.
Date: Sat,  2 Nov 2024 14:31:13 +0100

From: Ashish SHUKLA <ashish.is <at> lostca.se>

* gnu/packages/video.scm (libvpx): Update to 1.15.0.

Change-Id: I52213edadb56b8a65394281103dde528173cd7b3
---
 gnu/packages/video.scm | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/video.scm b/gnu/packages/video.scm
index ff5dcd8daa..5d681f1c28 100644
--- a/gnu/packages/video.scm
+++ b/gnu/packages/video.scm
@@ -2959,7 +2959,7 @@ (define-public mpv-mpris
 (define-public libvpx
   (package
     (name "libvpx")
-    (version "1.12.0")
+    (version "1.15.0")
     (source (origin
               (method git-fetch)
               (uri (git-reference
@@ -2968,9 +2968,7 @@ (define-public libvpx
               (file-name (git-file-name name version))
               (sha256
                (base32
-                "1x12f2bd4jqd532rnixmwvcx8d29yxiacpcxqqh86qczc49la8gm"))
-              (patches (search-patches "libvpx-CVE-2016-2818.patch"
-                                       "libvpx-CVE-2023-5217.patch"))))
+                "1q2scpfiifhpilw6qqpqihk98plj57gwh0vyiqwsv991i7b322bv"))))
     (build-system gnu-build-system)
     (arguments
      `(#:configure-flags (list "--enable-shared"

base-commit: 20c7b8dd04e421a139a02438cf1ddfdfe544a446
-- 
2.47.0

Message #10 received at 74176 <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: 74176 <at> debbugs.gnu.org
Subject: Need for v2
Date: Wed, 20 Nov 2024 10:56:10 +0100

Hello Ashish,

just a quick comment: When removing patches from a package, you also need
"git rm" the corresponding files, and to remove them from gnu/local.mk.

Well, just like in your commit 3c92a633c3f7aff0fe9fa3b056071bc7c9c72395 ;-)

So could you please send a version 2?

Indeed the number of dependent packages is a (separate) issue; unfortunately
we do not have a multimedia team or similar now.

Andreas

Message #13 received at 74176 <at> debbugs.gnu.org (full text, mbox):

From: "Ashish SHUKLA" <ashish.is <at> lostca.se>
To: "Andreas Enge" <andreas <at> enge.fr>
Cc: 74176 <at> debbugs.gnu.org
Subject: [PATCH] gnu: libvpx: Update to 1.15.0.
Date: Sat, 22 Mar 2025 13:28:31 +0000

[Message part 1 (text/plain, inline)]

> Hello Ashish,
> 
> just a quick comment: When removing patches from a package, you also need
> "git rm" the corresponding files, and to remove them from gnu/local.mk.
> 
> Well, just like in your commit 3c92a633c3f7aff0fe9fa3b056071bc7c9c72395 ;-)
> 
> So could you please send a version 2?
> 
> Indeed the number of dependent packages is a (separate) issue; unfortunately
> we do not have a multimedia team or similar now.
> 
> Andreas

I'm sorry. It seems I missed your reply to this thread. I see my patch 
is committed[0], do we still need to keep this open ?

References:
[0] 
https://codeberg.org/guix/guix-mirror/commit/4c9d112831f49d69b4a90740f5e2fdd17f68fa17

Thanks!
-- 
Ashish SHUKLA | GPG: F682 CDCC 39DC 0FEA E116  20B6 C746 CFA9 E74F A4B0

"If I destroy you, what business is it of yours ?" (Dark Forest, Liu Cixin)

[signature.asc (application/pgp-signature, inline)]

Message #18 received at 74176-done <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Ashish SHUKLA <ashish.is <at> lostca.se>
Cc: 74176-done <at> debbugs.gnu.org
Subject: Re: [PATCH] gnu: libvpx: Update to 1.15.0.
Date: Sat, 22 Mar 2025 14:47:47 +0100

Hello,

Am Sat, Mar 22, 2025 at 01:28:31PM +0000 schrieb Ashish SHUKLA:
> I'm sorry. It seems I missed your reply to this thread. I see my patch is
> committed[0], do we still need to keep this open ?

I think I only learnt after sending my comment that debbugs does not
resend messages to the bug submitter and other people who have
contributed, so I did not cc you (usually I send all my messages "by hand"
to the bug number).

Very mysteriously, the CVE patch still applies, even to the latest git
checkout with a commit from ten days ago! So I think we should just keep
it in, and I am closing this bug.

Andreas

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.