Bug 142505

Summary:	kde-base/kdegraphics Bundled vulnerable libtiff code?
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal	CC:	kde
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0009.html
Whiteboard:
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2006-08-02 01:39:25 UTC

See bug #142383 for details.

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2006-08-02 02:55:22 UTC

Can you give a version? Because I cannot find anything similar to what is being patched in the whole kdegraphics-3.5.4 tarball.

Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2006-08-02 03:39:55 UTC

Seems to be in 3.2, see URL for the Mandriva report.

Comment 3 Diego Elio Pettenò (RETIRED) gentoo-dev

2006-08-02 03:44:56 UTC

A-hem... we're on 3.4 and 3.5 .... I've removed even 3.3 from portage a few days ago...

Comment 4 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2006-08-02 03:46:34 UTC

Thx Diego.

Ok, if it is not in 3.5 I'll close this one as INVALID.