Summary: | app-emulation/emul-linux-x86-baselibs-2.1.1 contains vulnerable version of zlib | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Torsten Kaiser <Storklerk> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | critical | ||
Priority: | High | ||
Version: | unspecified | ||
Hardware: | AMD64 | ||
OS: | Linux | ||
Whiteboard: | A1 [glsa] | ||
Package list: | Runtime testing required: | --- |
Description
Torsten Kaiser
2005-07-29 03:44:57 UTC
AMD64 team, I guess you need to push a new baselibs package to fix this... i'll provide an updated version asap emul-linux-x86-baselibs-2.2.tar.bz2 is in /space/distfiles-local on toucan, in four hours i'll put the bumped ebuild into the tree ebuild is in portage and marked stable on all arches (what a wonder) If I try to compile Wine now (manually, using gcc32/ no chroot), it fails when linking zlib - ld doesn't seem to recognize libz.so.1.2.3 ("ldconfig -v" lists it, the Flash plugin works - but ld fails)... After downgrading to baselibs-2.1.1, everything works again. Version 2.2 doesn't have libgmodule-1.2.so.0 anymore. This is needed for configuring turboprint (commercial 32 bit printer driver for canon etc): cruncher ~ # xtpsetup xtpsetup: error while loading shared libraries: libgmodule-1.2.so.0: cannot open shared object file: No such file or directory After downgrading again, xtpsetup works again. In reply to comment 5: Please open another bug for this, but try 2.2.2 first (not yet in portage, but will be commited in a few hours) In reply to comment 6: I'm aware of that, will be fixed with 2.2.2. You may want have a look at bug 100795 GLSA 200507-28 [10:43:43] <blubb> the problem is: since my emul-linux-x86-baselibs-2.2 had lots of problems, Herbs created 2.1.2, which also fixes the hole and removed the broken 2.2, but the GLSA still says <2.2 is vulnerable GLSA updated |