152082 – www-servers/pound-1.10 - false positive on GLSA-200606-05

Bug 152082 - www-servers/pound-1.10 - false positive on GLSA-200606-05

Summary: www-servers/pound-1.10 - false positive on GLSA-200606-05

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	GLSA Errors (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	jaervosz
Keywords:

Depends on:
Blocks:

Reported:	2006-10-20 03:53 UTC by Jakub Moc (RETIRED)
Modified:	2006-11-24 13:52 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jakub Moc (RETIRED) gentoo-dev

2006-10-20 03:53:20 UTC

www-servers/pound-1.10: vulnerable via glsa(200606-05) ( ver < 2.0.5 && ver not = 1.9.4 ), affects ('alpha', 'amd64', 'hppa', 'mips', 'ppc', 'sparc', 'x86')

This version is not vulnerable, see Bug 118541, Comment #25 and the changelog:

*pound-1.10 (16 May 2006)

  16 May 2006; Thilo Bangert <bangert@gentoo.org> +pound-1.10.ebuild:
  added old version - has the security fix, but not the incompatible
  configuration file change (bug #118541)

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2006-11-24 13:52:31 UTC

GLSA updated. Sorry for the delay.