Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 605166 - sys-libs/libcap-ng-0.7.8: please stabilize
Summary: sys-libs/libcap-ng-0.7.8: please stabilize
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL: https://people.redhat.com/sgrubb/libc...
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks:
 
Reported: 2017-01-09 10:34 UTC by Hanno Böck
Modified: 2017-02-18 05:53 UTC (History)
0 users

See Also:
Package list:
=sys-libs/libcap-ng-0.7.8
Runtime testing required: ---
stable-bot: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hanno Böck gentoo-dev 2017-01-09 10:34:48 UTC
base-system, can we stabilize this version?

There's a notable bug fixed by upstream in this version, from upstream's changelog:
- Fix sscanf string lengths in netcap

This is a buffer overflow writing to some arbitrary memory. As there's no attacker-controlled input involved it is probably not a security issue, but it's worrying nevertheless and may lead to malfunctioning of the software.
Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev 2017-01-09 12:04:43 UTC
Starting stabilization with approval from Polynomial-C.


@ Arches,

please test and mark stable: =sys-libs/libcap-ng-0.7.8
Comment 2 Agostino Sarubbo gentoo-dev 2017-01-10 14:57:28 UTC
amd64 stable
Comment 3 Agostino Sarubbo gentoo-dev 2017-01-10 15:27:41 UTC
x86 stable
Comment 4 Agostino Sarubbo gentoo-dev 2017-01-11 10:54:31 UTC
sparc stable
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2017-01-15 10:03:38 UTC
Stable for HPPA.
Comment 6 Agostino Sarubbo gentoo-dev 2017-01-15 16:07:56 UTC
ppc stable
Comment 7 Tobias Klausmann (RETIRED) gentoo-dev 2017-01-16 19:56:29 UTC
Stable on alpha.
Comment 8 Agostino Sarubbo gentoo-dev 2017-01-17 14:42:22 UTC
ia64 stable
Comment 9 Agostino Sarubbo gentoo-dev 2017-01-20 11:11:26 UTC
ppc64 stable
Comment 10 Markus Meier gentoo-dev 2017-02-18 05:53:50 UTC
arm stable, all arches done.