Summary: | <media-video/minitube-1.6: Insecure temporary file | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Markos Chandras (RETIRED) <hwoarang> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | media-video, qt, write2David |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | B3 [glsa] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 388871 | ||
Bug Blocks: |
Description
Markos Chandras (RETIRED)
2011-10-29 16:31:10 UTC
Just to clarify, 1.5-r1 has a temporary (badly coded but still better than nothing) fix which was rejected by upstream. Thanks Markos. Arches, please test and mark stable: =media-video/minitube-1.6 target KEYWORDS : "amd64 x86" amd64: pass NB: fails with linguas fr, ar... can those be disabled on the fly or fixed ? > NB: fails with linguas fr, ar... can those be disabled on the fly or fixed ?
ar works, my bad... fr doesn't
amd64 ok amd64: pass amd64 : Ok + 01 Nov 2011; Tony Vroon <chainsaw@gentoo.org> minitube-1.6.ebuild: + Marked stable on AMD64 based on arch testing by Agostino "ago" Sarubbo, + Elijah "Armageddon" El Lazkani & Tomáš "Mepho" Pružina in security bug + #388867. x86 stable Thanks, folks. GLSA vote: yes. Vote: yes. Created new GLSA request. This issue was resolved and addressed in GLSA 201203-18 at http://security.gentoo.org/glsa/glsa-201203-18.xml by GLSA coordinator Sean Amoss (ackle). |