| Summary: | www-servers/pound-1.10 - false positive on GLSA-200606-05 | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Jakub Moc (RETIRED) <jakub> |
| Component: | GLSA Errors | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | ||
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | jaervosz | ||
| Package list: | Runtime testing required: | --- | |
GLSA updated. Sorry for the delay. |
www-servers/pound-1.10: vulnerable via glsa(200606-05) ( ver < 2.0.5 && ver not = 1.9.4 ), affects ('alpha', 'amd64', 'hppa', 'mips', 'ppc', 'sparc', 'x86') This version is not vulnerable, see Bug 118541, Comment #25 and the changelog: *pound-1.10 (16 May 2006) 16 May 2006; Thilo Bangert <bangert@gentoo.org> +pound-1.10.ebuild: added old version - has the security fix, but not the incompatible configuration file change (bug #118541)