Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 246953 - app-text/cmigemo <1.3c-r1 has insecure runpaths (cwd)
Summary: app-text/cmigemo <1.3c-r1 has insecure runpaths (cwd)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Runpath Issues (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B? [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2008-11-15 17:39 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2009-06-12 22:03 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Build log (app-text:cmigemo-1.3c:20081115-173624.log,6.85 KB, text/plain)
2008-11-15 17:40 UTC, Diego Elio Pettenò (RETIRED) 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2008-11-15 17:39:48 UTC 
See the attached build log.
Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev 2008-11-15 17:40:08 UTC 
Created attachment 171883 [details]
Build log
Comment 2 Stefan Behte (RETIRED) gentoo-dev Security 2008-11-30 17:00:58 UTC 
Was this reported upstream?
Comment 3 MATSUU Takuto (RETIRED) gentoo-dev 2008-12-17 15:28:14 UTC 
Fixed in cvs.
Comment 4 Pierre-Yves Rofes (RETIRED) gentoo-dev 2009-04-08 12:07:32 UTC 
(In reply to comment #3)
> Fixed in cvs.
> 
Thanks.

Arches, please test and mark stable app-text/cmigemo-1.3c-r1.
target KEYWORDS="alpha ~amd64 ppc x86"
Comment 5 Tobias Klausmann (RETIRED) gentoo-dev 2009-04-08 16:35:16 UTC 
Stable on alpha (also stabilized migemo-dict-200812).
Comment 6 Brent Baude (RETIRED) gentoo-dev 2009-04-13 14:35:27 UTC 
ppc done
Comment 7 Raúl Porcel (RETIRED) gentoo-dev 2009-04-14 11:23:53 UTC 
x86 stable
Comment 8 Pierre-Yves Rofes (RETIRED) gentoo-dev 2009-04-19 20:36:00 UTC 
time for GLSA decision. I vote NO.
Comment 9 Stefan Behte (RETIRED) gentoo-dev Security 2009-06-12 22:03:25 UTC 
No, too. Closing.