Bug 247754

Summary:	media-libs/clibpdf has an internal copy of zlib-1.1.3 (!)
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	New packages	Assignee:	Robin Johnson <robbat2>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	esigra, printing, security, tex
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2008-11-20 14:41:53 UTC

Have fun, I'm almost certain that's a vulnerable version...

And just so you know, since the symbols are exported, it should be possible to use LD_PRELOAD to get that version of zlib loaded in any other non-suid program.

Nice, ain't it?

[And the license is not funny either]

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2009-09-22 16:47:55 UTC

Removed from portage.