Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 635110 - www-client/elinks bundles a copy of gettext
Summary: www-client/elinks bundles a copy of gettext
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Felix Janda
URL:
Whiteboard:
Keywords: NeedPatch
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2017-10-22 21:27 UTC by Andreas K. Hüttel
Modified: 2022-10-13 02:10 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas K. Hüttel archtester gentoo-dev 2017-10-22 21:27:08 UTC
www-client/elinks bundles a copy of gettext, which is statically linked into the binary. That's a security vulnerability waiting to happen.

See also bug 635090.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-05-19 18:11:51 UTC
Ping.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-08-19 18:19:22 UTC
ping
Comment 3 Felix Janda 2020-08-19 20:31:01 UTC
I've opened an issue upstream: https://github.com/rkd77/felinks/issues/62
Comment 4 Larry the Git Cow gentoo-dev 2022-10-13 01:51:44 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=60077257913d961895b343c5126ee4bdeb77ca3c

commit 60077257913d961895b343c5126ee4bdeb77ca3c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-10-13 01:50:51 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-10-13 01:51:18 +0000

    www-client/elinks: add 0.15.1
    
    Bug: https://bugs.gentoo.org/635110
    Bug: https://bugs.gentoo.org/864127
    Closes: https://bugs.gentoo.org/780672
    Signed-off-by: Sam James <sam@gentoo.org>

 www-client/elinks/Manifest             |   1 +
 www-client/elinks/elinks-0.15.1.ebuild | 148 ++++++++++++++++++++++++++++++
 www-client/elinks/elinks-9999.ebuild   | 162 ++++++++++++++++-----------------
 3 files changed, 228 insertions(+), 83 deletions(-)