app-admin/sysstat-5.0.2 version bump
Sparc, PPC, and AMD64 teams: Can you please mark this stable on your architectures since there seems to be a security bug related with this: http://www.securityfocus.com/bid/9844/info/ - Thanks!
Stable on sparc.
in portage
PPC people still need to unmask this.
This needs a nudge since this is a security issue and the PPC people haven't yet marked this as stable. Thanks...
finally bumped stable on ppc.
Thanks Pylon. Should we issue a GLSA for this or not - this seems to be a issue with an insecure /tmp symlink vulnerability?
Yes, It allows overwriting files with the id of the user running the isag command (theorically, not root). I am not sure a GLSA is needed, but there was a RHSA and a DSA on the subject : https://rhn.redhat.com/errata/RHSA-2004-093.html http://www.debian.org/security/2004/dsa-460 If we do a GLSA, we should do it quickly :) -K
GLSA 200404-04