Bug 142554

Summary:	gnome-extra/libgsf includes vulnerable libwmf? (CVE-2006-3376)
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	VERIFIED INVALID
Severity:	normal	CC:	gnome
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B2 [ebuild?] frilled
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2006-08-02 08:42:43 UTC

Please see bug #139325 for further details.

Comment 1 Wolf Giesen (RETIRED) gentoo-dev

2006-08-03 00:43:52 UTC

Calling in gnome. Could you please check whether the affected code is in the package (see mentioned bug)?

Comment 2 foser (RETIRED) gentoo-dev

2006-08-03 07:31:36 UTC

libwmf is a lib

Comment 3 Wolf Giesen (RETIRED) gentoo-dev

2006-08-03 07:32:54 UTC

Closing, thanks.

Comment 4 Wolf Giesen (RETIRED) gentoo-dev

2006-08-03 07:39:33 UTC

I just hope you actually checked the sources, since we had some apps bringing bundled libraries and not using the system lib .-)

Thanks, closing.