Bug 240722

Summary:	sys-apps/paludis Insecure search path for python -c in ebuilds
Product:	Gentoo Security	Reporter:	Robert Buchholz (RETIRED) <rbu>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	ciaran.mccreesh, ferdy, flameeyes, tanderson
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	~1 [noglsa]
Package list:		Runtime testing required:	---
Bug Depends on:	239560
Bug Blocks:

Description Robert Buchholz (RETIRED) gentoo-dev

2008-10-09 18:06:49 UTC

bug 239560 also affects Paludis, quoting ciaranm:

Paludis is affected for pkg_setup only. We'll have 0.30.2 out in a
couple of hours working around this.

Comment 1 Ciaran McCreesh 2008-10-09 22:25:27 UTC

0.30.2 is out. Don't know who is doing tree ebuilds yet -- a straight copy of 0.30.1 should work, but please do the usual upgrade testing before committing...

Comment 2 Thomas Anderson (tanderson) (RETIRED) gentoo-dev

2008-10-10 20:28:24 UTC

0.30.3 is in the tree. I skipped 0.30.2 because testing revealed a regression which was promptly fixed.

Comment 3 Robert Buchholz (RETIRED) gentoo-dev

2008-10-11 10:48:03 UTC

thanks, closing [noglsa]

Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev

2008-12-23 19:49:38 UTC

*** Bug 251994 has been marked as a duplicate of this bug. ***