affected versions: 2.2 and 2.2.1 http://www.debian.org/security/2004/dsa-458
Liquidx: Would you remove the 2.2.1-r5 ebuild from x86, ppc, sparc, and alpha trees?
i sure can, but i have a feeling that this bug is present in 2.2.3 as well .. i can't find a proper vunerability explaination anywhere except for that debian advisory
having had a look at 2.2.3, it looks like the problem was fixed in 2.2.3, although not in the same way as the debian patch. 2.2.1 removed from portage.
Mission accomplished. GLSA to be issued.