Summary: | www-apps/gallery <1.5.8 Multiple vulnerabilities (CVE-2008-3600) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Robert Buchholz (RETIRED) <rbu> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | ||
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://secunia.com/advisories/31367/ | ||
Whiteboard: | B3? [glsa] | ||
Package list: | Runtime testing required: | --- |
Description
Robert Buchholz (RETIRED)
2008-08-06 22:30:11 UTC
Removed gallery-1.5.3, 1.5.7, added 1.5.8. Targets: alpha amd64 hppa ppc sparc x86 Arches, please test and mark stable: =www-apps/gallery-1.5.8 Target keywords : "alpha amd64 hppa ppc sparc x86" Is -1.5.8 preferred over -2.2.5 which is already stable on everything? gallery 1.X and 2.X are maintained independently, and our (previous stable) 1.5.3 ebuild has been removed. If web-apps decides to maintain 1.X (as does upstream), we need to mark the 1.5.8 version stable. Seems strange, but OK. Sparc stable. alpha/x86 stable >>> Install gallery-1.5.8 into /mnt/alt/portage-tmp/portage/www-apps/gallery-1.5.8/image/ category www-apps dodoc: AUTHORS does not exist dodoc: ChangeLog does not exist dodoc: ChangeLog.archive does not exist dodoc: README does not exist cp: cannot stat `./gallery-1.5.8/gallery': No such file or directory install: cannot stat `/mnt/alt/portage-tmp/portage/www-apps/gallery-1.5.8/temp/gallery': No such file or directory * (info) /keeps/gentoo/portage/www-apps/gallery/files/postinstall-en.txt (lang: en) >>> Completed installing gallery-1.5.8 into /mnt/alt/portage-tmp/portage/www-apps/gallery-1.5.8/image/ That doesn't seem right... Stable for HPPA. @web-apps: please fix the thingie in comment #7, so ugly =) amd64 stable Fixed the installation errors in CVS. ppc stable time for GLSA decision, I vote YES. YES too, request filed. Hrm, removed stable version before we stabilized this one. My mistake. Anyhow, the new version got stabilizied pretty fast and nobody complained so I guess it was okay. webapps done. GLSA 200811-02, thanks everyone, sorry about the delay. |