138672 2006-07-01 02:01 0000 app-emulation/emul-linux-x86-baselibs included libpng is vulnerable 2006-07-19 10:14:56 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified AMD64 Linux RESOLVED FIXED A2(?) [glsa] jaervosz P2 normal --- 138433 138736 1 blubb@gentoo.org security@gentoo.org amd64@gentoo.org jadamcze@utas.edu.au blubb@gentoo.org 2006-07-01 02:01:26 0000 according to bug 138433 media-libs/libpng needs to be updated to version 1.2.12 to fix a buffer overflow, so amd64 has to update its app-emulation/emul-linux-x86-baselibs. blubb@gentoo.org 2006-07-01 02:54:26 0000 bugzi sucks blubb@gentoo.org 2006-07-01 03:25:42 0000 emul-linux-x86-baselibs-2.5.1 includes the fixed libpng. I've committed the ebuild to the tree, though as ~amd64, because it is based on 2.5 which was previously ~amd64 and i could only marginally test it, so i'd be glad if someone else could do some more testing and then mark it stable jaervosz@gentoo.org 2006-07-01 04:37:09 0000 Updating status whiteboard. blubb@gentoo.org 2006-07-05 11:37:54 0000 marked stable and updating status whiteboard to match the one from bug 138433 again jaervosz@gentoo.org 2006-07-12 09:58:04 0000 Lets have a common GLSA with bug #138433. koon@gentoo.org 2006-07-19 10:14:56 0000 Thx everyone, this is in GLSA 200607-06