Bug 297648

Summary:	sys-cluster/lam-mpi bundles a copy of libltdl
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	New packages	Assignee:	Justin Bronder (RETIRED) <jsbronder>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	cluster, esigra, qa, security
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	324415
Bug Blocks:	251464

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2009-12-20 13:56:58 UTC

Given the library has been found vulnerable, this should probably be checked thoroughly.

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 11:32:52 UTC

This is CVE-2009-3736. Fix it, or it will be lastrited with all of it's reverse dependencies.

Comment 2 Justin Bronder (RETIRED) gentoo-dev

2010-03-03 13:43:56 UTC

Last rite it.  Should be zero reverse deps as mpich2 and openmpi provide the same functionality.

Comment 3 Justin Bronder (RETIRED) gentoo-dev

2012-06-25 16:46:59 UTC

sys-cluster/lam-mpi removed from the tree re #324415