Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 240722 - sys-apps/paludis Insecure search path for python -c in ebuilds
Summary: sys-apps/paludis Insecure search path for python -c in ebuilds
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High trivial (vote)
Assignee: Gentoo Security
URL:
Whiteboard: ~1 [noglsa]
Keywords:
Depends on: CVE-2008-4394
Blocks:
  Show dependency tree
 
Reported: 2008-10-09 18:06 UTC by Robert Buchholz (RETIRED)
Modified: 2008-12-23 19:49 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Buchholz (RETIRED) gentoo-dev 2008-10-09 18:06:49 UTC
bug 239560 also affects Paludis, quoting ciaranm:

Paludis is affected for pkg_setup only. We'll have 0.30.2 out in a
couple of hours working around this.
Comment 1 Ciaran McCreesh 2008-10-09 22:25:27 UTC
0.30.2 is out. Don't know who is doing tree ebuilds yet -- a straight copy of 0.30.1 should work, but please do the usual upgrade testing before committing...
Comment 2 Thomas Anderson (tanderson) (RETIRED) gentoo-dev 2008-10-10 20:28:24 UTC
0.30.3 is in the tree. I skipped 0.30.2 because testing revealed a regression which was promptly fixed.
Comment 3 Robert Buchholz (RETIRED) gentoo-dev 2008-10-11 10:48:03 UTC
thanks, closing [noglsa]
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2008-12-23 19:49:38 UTC
*** Bug 251994 has been marked as a duplicate of this bug. ***