295912 – <dev-libs/xmlsec-1.2.14: Insecure .la search path (CVE-2009-3736)

Bug 295912 - <dev-libs/xmlsec-1.2.14: Insecure .la search path (CVE-2009-3736)

Summary: <dev-libs/xmlsec-1.2.14: Insecure .la search path (CVE-2009-3736)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All All

Importance:	High trivial
Assignee:	Gentoo Security

URL:
Whiteboard:	~2 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2009-12-05 21:50 UTC by Arfrever Frehtes Taifersar Arahesis (RETIRED)
Modified:	2009-12-05 22:19 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arfrever Frehtes Taifersar Arahesis (RETIRED) gentoo-dev

2009-12-05 21:50:33 UTC

dev-libs/xmlsec-1.2.14 has been released 25 minutes ago. It uses system libltdl instead of internal copy vulnerable to CVE-2009-3736 (see bug #295535).

Comment 1 Arfrever Frehtes Taifersar Arahesis (RETIRED) gentoo-dev

2009-12-05 22:17:51 UTC

dev-libs/xmlsec-1.2.14 is now in the tree.