<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>77002</bug_id>
          
          <creation_ts>2005-01-07 03:12 0000</creation_ts>
          <short_desc>media-libs/imlib2: affected by GLSA 200412-03</short_desc>
          <delta_ts>2005-01-11 07:51:14 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <status_whiteboard>A2 [glsa]</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>major</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>vorlon@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>ppc-macos@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2005-01-07 03:12:13 0000</bug_when>
            <thetext>It seems that imlib2 is affected by GLSA 200412-03 (bug 72681).

vapier, pls verify and patch
____

Ubuntu and Debian have fixed this already:

http://www.ubuntulinux.org/support/documentation/usn/usn-55-1
https://bugzilla.ubuntu.com/show_bug.cgi?id=4589
http://www.debian.org/security/2005/dsa-628</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vapier@gentoo.org</who>
            <bug_when>2005-01-07 06:29:27 0000</bug_when>
            <thetext>it is and it&apos;s already been fixed in upstream cvs, i was just waiting a little because raster was planning on doing a new release soon</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vapier@gentoo.org</who>
            <bug_when>2005-01-08 01:00:28 0000</bug_when>
            <thetext>1.2.0 now in portage and stable for everyone</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-01-08 01:58:48 0000</bug_when>
            <thetext>Looks ready for GLSA</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-01-09 10:05:53 0000</bug_when>
            <thetext>Apparently this still needs ppc64 testing (for stable) and ppc-macos marking ~.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2005-01-09 10:39:49 0000</bug_when>
            <thetext>seems to work, but I&apos;m a little bit confused: there is no KEYWORDS line in imlib2-1.2.0 ebuild!?  So... can someone please explain that? Or is that line just lost?  Markus</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2005-01-10 11:51:10 0000</bug_when>
            <thetext>ok, this had to be done in the enlightenment eclass. vapier made the changes. thx!</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-01-10 14:14:03 0000</bug_when>
            <thetext>Now ready :)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>krispykringle@gentoo.org</who>
            <bug_when>2005-01-11 07:51:14 0000</bug_when>
            <thetext>GLSA 200501-19</thetext>
          </long_desc>
      
    </bug>

</bugzilla>