Bug 29802

Summary: jansi patch needed for log4j update
Product: Mageia Reporter: David Walser <luigiwalser>
Component: RPM PackagesAssignee: Java Stack Maintainers <java>
Status: REOPENED --- QA Contact:
Severity: normal    
Priority: Normal CC: mageia
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: jansi-2.1.1-1.mga9.src.rpm CVE:
Status comment:

Description David Walser 2021-12-22 16:54:33 CET
Fedora has issued an advisory on December 21:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/

Corresponding log4j advisory:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/AWKZIIRNESRPVUVBP7NGANPKUZN54Q23/

Apparently jansi needed a patch for the updated log4j to work.  We probably need it too.
Comment 1 Nicolas Lécureuil 2021-12-22 23:08:15 CET
no need for us in mageia 8, the version we have ( of jansi still have the AnsiRenderer ).

Status: NEW => RESOLVED
Resolution: (none) => INVALID
CC: (none) => mageia

Comment 2 David Walser 2021-12-22 23:11:18 CET
I see.  We need this for Cauldron then.

Source RPM: jansi-1.18-2.mga8.src.rpm => jansi-2.1.1-1.mga9.src.rpm
Resolution: INVALID => (none)
Status: RESOLVED => REOPENED
Version: 8 => Cauldron