Bug 589990

Summary:	pango: rebuild against newer glib2
Product:	Red Hat Enterprise Linux 6	Reporter:	Tomas Hoger <thoger>
Component:	pango	Assignee:	Behdad Esfahbod <behdad>
Status:	CLOSED NOTABUG	QA Contact:	desktop-bugs <desktop-bugs>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.0	CC:	mclasen, tpelka, vbenes
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	pango-1.28.1-1.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-07-23 13:39:16 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	573966
Bug Blocks:	554416

Description Tomas Hoger 2010-05-07 13:10:44 UTC

Description of problem:
pango should be rebuilt against new glib2 package version (>= glib2-2.22.5-2.el6) that have g_new version with guards against integer overflows.

This is needed for:
  https://bugzilla.redhat.com/show_bug.cgi?id=554416#c7

Protections to g_new were added via:
  https://bugzilla.redhat.com/show_bug.cgi?id=573966

Additional info:
Rebuild should address existing blocker bug #573883 too.

Comment 1 Tomas Pelka 2010-05-27 14:30:51 UTC

Reproducer:
 - check dependency tree (see description).

Giving qa_ack.

Comment 2 Behdad Esfahbod 2010-06-15 17:38:48 UTC

Built pango-1.28.1-1.el6.

Comment 3 Tomas Pelka 2010-06-16 09:05:26 UTC

# rpm -qpR pango-1.28.1-1.el6.x86_64.rpm | grep glib2
glib2 >= 2.17.3-1

Shouldn't be this switched for glib2 >= 2.22 or so?

My system have glib2-2.22.5-3.el6, new pango is successfully installable and works fine.

Is this sufficient reproducer? If yes we could move to verified.

Comment 4 Vladimir Benes 2010-07-15 11:12:59 UTC

please update glib dependency to >=glib2-2.22.5-2.el6 as (according to bug 573966) the wanted behaviour was added into that version.

Comment 5 Matthias Clasen 2010-07-15 11:28:56 UTC

There will be no older glib2 than that in RHEL6. So, while it may be more correct to bump it, it is not as if that would prevent anything bad from happening.

Comment 9 Vladimir Benes 2010-07-23 13:39:16 UTC

closing this as not a bug see previous comments. reopen if you think we should do anything more about it

Comment 10 Tomas Hoger 2010-07-23 13:50:11 UTC

I'd say resolution is not correct, as requested rebuild was done.

Comment 11 Vladimir Benes 2010-07-23 14:00:10 UTC

the require from pango-1.28.1-3.el6 is glib2 >= 2.17.3-1 not 2.22 so it wasn't fixed as expected