Bug 408887 – [security issue] [CVE-2011-2895] please version bump freebsd-ubin-8.2-r1

• Status: RESOLVED FIXED
• Product: Gentoo/Alt

[Description Yuta SATOH 2012-03-19 16:35:47 UTC]

Title is all.
Details, please see URL.


Reproducible: Always

[Comment 1 Yuta SATOH 2012-03-19 16:41:36 UTC]

I think it's okay with only patches for usr.bin/compress/zopen.c from this result.

# equery b compress
sys-freebsd/freebsd-ubin-9.0 (/usr/bin/compress)

# equery b gzip
app-arch/gzip-1.4 (/bin/gzip)

[Comment 2 Alexis Ballier 2012-03-19 19:11:47 UTC]

9.0 is fixed afaik

[Comment 3 Yuta SATOH 2012-03-19 19:33:55 UTC]

(In reply to comment #2)
> 9.0 is fixed afaik

Yes. I know about it.
However, I think freebsd-*-8.2 packages are included in official portage tree yet, and we need to provide security updates.

Thanks in advance.

[Comment 4 Alexis Ballier 2012-03-19 21:12:38 UTC]

(In reply to comment #3)
> (In reply to comment #2)
> > 9.0 is fixed afaik
> 
> Yes. I know about it.
> However, I think freebsd-*-8.2 packages are included in official portage
> tree yet, and we need to provide security updates.
> 
> Thanks in advance.

or build 9.0 stages and deprecate older versions and remove them some time later :)

anyway, i dont have any <9.0 installs anymore, so i cant do it

[Comment 5 Naohiro Aota 2012-04-02 10:28:51 UTC]

+*freebsd-ubin-8.2-r1 (02 Apr 2012)
+
+  02 Apr 2012; Naohiro Aota <[e-mail]>
+  +files/freebsd-ubin-8.2-compress.patch, +freebsd-ubin-8.2-r1.ebuild,
+  -freebsd-ubin-8.2.ebuild:
+  Add patch to fix CVE-2011-2895. #408887
+