Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 201678

Summary: net-irc/ptlink-ircd: use install_cert in pkg_postinst
Product: Gentoo Linux Reporter: Robert Buchholz (RETIRED) <rbu>
Component: New packagesAssignee: Packages in net-irc <net-irc>
Status: RESOLVED FIXED    
Severity: normal CC: net-irc, ulm
Priority: Normal Keywords: SECURITY
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 174759    

Description Robert Buchholz (RETIRED) gentoo-dev 2007-12-08 14:41:38 UTC
Installation of SSL certificates in src_install might expose the secret
keys when building binary packages (bug 174759).

Please update the package mentioned in this bug's title to use the new
"install_cert" function of ssl-cert.eclass, and use it only in
your pkg_postinst or pkg_config.

This bug is for keeping track of specific changes to your ebuilds
and stabling, general questions about this should be discussed in
bug 174759.

Our aim is to have fixed ebuilds in the tree by Dec. 23rd, otherwise
we will commit this minor change. Stabling should be done two weeks after the
commit, at last around Jan, 6th.
Comment 1 Dawid Węgliński (RETIRED) gentoo-dev 2007-12-09 01:12:06 UTC
Fixed 
Comment 2 Robert Buchholz (RETIRED) gentoo-dev 2007-12-09 01:42:32 UTC
security: was never stable.
Comment 3 Robert Buchholz (RETIRED) gentoo-dev 2007-12-16 13:41:00 UTC
unfortunately, editing an existing ebuild will not help users who have this package installed and use quickpkg. Please revbump.
Comment 4 Dawid Węgliński (RETIRED) gentoo-dev 2007-12-16 17:58:07 UTC
Sorry, revbumped