Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 512292 (CVE-2013-4159) - dev-db/ctdb : /tmp file vulnerability issues
Summary: dev-db/ctdb : /tmp file vulnerability issues
Status: RESOLVED FIXED
Alias: CVE-2013-4159
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Deadline: 2017-07-05
Assignee: Gentoo Security
URL: http://www.openwall.com/lists/oss-sec...
Whiteboard: B4 [noglsa cve]
Keywords:
Depends on:
Blocks:
 
Reported: 2014-06-03 14:17 UTC by Agostino Sarubbo
Modified: 2017-08-06 17:32 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2014-06-03 14:17:32 UTC
From ${URL} :

So some various tmp issues were fixed in ctdb, I missed the
announcement last year:

http://wiki.samba.org/index.php/CTDB2releaseNotes

ctdb 2.5

Release Notes for ctdb 2.5
October 30, 2013

The default location of the ctdbd socket is now:
/var/run/ctdb/ctdbd.socket

For details please see https://bugzilla.redhat.com/show_bug.cgi?id=986773


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 2 Aaron Bauman (RETIRED) gentoo-dev 2016-11-12 13:52:40 UTC
@samba, please bump this to the latest version.  >=2.3 fixed the vulnerability listed here.
Comment 3 Aaron Bauman (RETIRED) gentoo-dev 2016-11-28 08:03:40 UTC
This can be tree cleaned once net-fs/samba-3.6.25 is removed... which has plenty of security bugs against it for cleanup anyhow.

* These packages depend on dev-db/ctdb:
net-fs/samba-3.6.25 (cluster ? >=dev-db/ctdb-1.13)
Comment 4 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-06-05 16:21:10 UTC
# Michał Górny <mgorny@gentoo.org> (05 Jun 2017)
# (on behalf of Treecleaner project)
# Unmaintained in Gentoo. Multiple versions behind upstream.
# Security vulnerabilities. No reverse dependencies anymore.
# Removal in 30 days. Bug #512292.
dev-db/ctdb
Comment 5 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-07-05 10:46:35 UTC
commit 70bb72fbed3d0e407d2a2ff7a33c6fdf307e9f9d
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: Wed Jul 5 12:31:26 2017
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: Wed Jul 5 12:35:18 2017

    dev-db/ctdb: Remove last-rited pkg, #512292
Comment 6 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-08-03 16:56:25 UTC
Nothing more for us to do here, unCC-ing to avoid cluttering search results.
Comment 7 Aaron Bauman (RETIRED) gentoo-dev 2017-08-06 17:32:24 UTC
GLSA Vote: No