Summary: | dev-util/cmake contains insecure RUNPATH's | ||||||
---|---|---|---|---|---|---|---|
Product: | Gentoo Security | Reporter: | Ashu Tiwary <ashutiwary> | ||||
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | minor | CC: | dragonheart, lisa | ||||
Priority: | High | ||||||
Version: | unspecified | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | B3 [glsa] | ||||||
Package list: | Runtime testing required: | --- | |||||
Bug Depends on: | |||||||
Bug Blocks: | 81745 | ||||||
Attachments: |
|
Description
Ashu Tiwary
2005-09-12 12:20:57 UTC
Created attachment 68281 [details]
logfile for "emerge dev-util/cmake"
i was able to successfully emerge cmake using the makemaker perl hack described in bug id 105054 (In reply to comment #2) > i was able to successfully emerge cmake using the makemaker perl hack > described in bug id 105054 actually - i lied - in the hurry of copy/n/paste'ing to report these issues, i had copied this section as well - the only one that has worked w/ the makemaker perl hack has been "emerge media-gfx/imagemagick-6.2.4.2" CCing maintainers Reporter : could you please check that it still happens after the latest Perl upgrade... yep - still happens - i had emerged the latest perl ebuild (perl-5.8.7-r1) yesterday ; tried "emerge dev-util/cmake" - got the same response; tried just now after an "emerge sync" - same response.... Thierry - I'm still looking - just been very busy lately. target cmake-2.0.6-r1.ebuild for stable alpha and ia64 please remove cmake-2.0.5.ebuild and cmake-2.0.6.ebuild when finished. Thankyou Ashu for the bug report and being so responsive for further testing. I just marked cmake-2.0.6-r1 stable on alpha, sorry for the delay. Cheers, Ferdy Stable on ia64. Let's make a GLSA with those that are ready. GLSA 200510-14 |