Bug 585830 (CVE-2015-3239) – <sys-libs/libunwind-1.1-r1 is affected by CVE-2015-3239

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Pacho Ramos 2016-06-13 13:49:09 UTC]

Fedora is applying this patch to fix it:
http://pkgs.fedoraproject.org/cgit/rpms/libunwind.git/tree/libunwind-1.1-fix-CVE-2015-3239.patch

[Comment 1 SpanKY 2016-06-13 18:14:11 UTC]

i've added the Fedora fix to 1.1-r1

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c16a9a7ccf4b0e56ca6481852cf6fce826c90ba0

[Comment 2 Agostino Sarubbo 2016-06-14 10:20:00 UTC]

amd64 stable

[Comment 3 Jeroen Roovers (RETIRED) 2016-06-15 15:41:12 UTC]

Stable for PPC64.

[Comment 4 Jeroen Roovers (RETIRED) 2016-06-16 10:42:33 UTC]

Stable for HPPA.

[Comment 5 Markus Meier 2016-06-21 18:32:16 UTC]

arm stable

[Comment 6 Agostino Sarubbo 2016-06-27 08:51:35 UTC]

x86 stable

[Comment 7 Agostino Sarubbo 2016-07-08 07:59:46 UTC]

ppc stable

[Comment 8 Agostino Sarubbo 2016-07-08 12:07:29 UTC]

ia64 stable.

Maintainer(s), please cleanup.
Security, please vote.

[Comment 9 Yury German 2016-09-10 07:54:48 UTC]

Arches, Thank you for your work.
GLSA Vote: No

Maintainer(s), please drop the vulnerable version(s).

[Comment 10 Aaron Bauman (RETIRED) 2016-10-14 13:53:20 UTC]

@maintainer(s), please clean the vulnerable versions.

[Comment 11 Yury German 2016-10-31 05:28:18 UTC]

Third Request - Maintainer(s), please drop the vulnerable version(s).

[Comment 12 Aaron Bauman (RETIRED) 2016-12-27 10:02:04 UTC]

Impossible to clean this still?

[Comment 13 Thomas Deutschmann (RETIRED) 2017-01-08 22:44:45 UTC]

Cleanup PR: https://github.com/gentoo/gentoo/pull/3384

[Comment 14 Aaron Bauman (RETIRED) 2017-01-15 07:23:07 UTC]

Tree is clean.

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=003b62585a5bce4148039f8a265b66f609f50023