Bug 914042 – app-emulation/libcacard-2.6.0 fails tests (PYTHON-3.12-SYSTEM): because of a global-buffer-overflow

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Agostino Sarubbo 2023-09-12 09:49:41 UTC]

https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: app-emulation/libcacard-2.6.0 fails tests (PYTHON-3.12-SYSTEM).
Discovered on: amd64 (internal ref: python-3.12_tinderbox)

NOTE:
(PYTHON-3.12-SYSTEM) in the summary means that the bug was found on a machine that runs python-3.12 but this bug MAY or MAY NOT BE related to the new python version

[Comment 1 Agostino Sarubbo 2023-09-12 09:49:44 UTC]

Created attachment 870338 [details]
build.log

build log and emerge --info

[Comment 2 Agostino Sarubbo 2023-09-12 09:49:45 UTC]

Created attachment 870339 [details]
1-test-suite.log

1-test-suite.log

[Comment 3 Agostino Sarubbo 2023-09-12 09:58:01 UTC]

I'm going to report it upstream

[Comment 4 Agostino Sarubbo 2023-09-13 07:10:31 UTC]

Dear security@,

https://gitlab.freedesktop.org/spice/libcacard/-/issues/16#note_2081325 and https://gitlab.freedesktop.org/spice/libcacard/-/issues/16#note_2081402 are self-explain.

Please move under security product if you think it is appropriate.

[Comment 5 Larry the Git Cow 2023-09-14 04:10:14 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6b7e97e46981c2a9d38a4c84b65e7490194f59a8

commit 6b7e97e46981c2a9d38a4c84b65e7490194f59a8
Author:     Sam James <[e-mail]>
AuthorDate: 2023-09-14 04:08:52 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2023-09-14 04:09:41 +0000

    app-emulation/libcacard: add 2.8.1
    
    Bug: https://bugs.gentoo.org/676676
    Closes: https://bugs.gentoo.org/914042
    Signed-off-by: Sam James <[e-mail]>

 app-emulation/libcacard/Manifest               |  1 +
 app-emulation/libcacard/libcacard-2.8.1.ebuild | 40 ++++++++++++++++++++++++++
 2 files changed, 41 insertions(+)