459272 – www-servers/skunkweb: world-readable logdir

Bug 459272 - www-servers/skunkweb: world-readable logdir

Summary: www-servers/skunkweb: world-readable logdir

Status:	RESOLVED WONTFIX

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	http://www.openwall.com/lists/oss-sec...
Whiteboard:	B4 [removal]
Keywords:

Depends on:	451790
Blocks:
	Show dependency tree

Reported:	2013-02-26 09:45 UTC by Agostino Sarubbo
Modified:	2015-09-03 13:55 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2013-02-26 09:45:13 UTC

From ${URL} :

skunkweb, a robust Python web application server, produces a world-readable 
log.

# ls -la /var/log/skunkweb/sw.log 
-rw-r--r-- 1 skunkweb skunkweb 4529 Feb 24 19:41 /var/log/skunkweb/sw.log

The development seems dead.
Upstream site: http://skunkweb.sourceforge.net/

Comment 1 Patrice Clement gentoo-dev

2015-08-04 08:43:35 UTC

This package is too old to be fixed and has been masked for removal by the Python team. See bug 451790.

Security, you can close this bug after the removal.

Comment 2 Patrice Clement gentoo-dev

2015-09-03 13:55:20 UTC

This package has been removed from the tree. See bug 451790.