Bug 260182

Summary:	kde-base/kdelibs-3.5.10-* are misleadingly flagged by a GLSA
Product:	Gentoo Security	Reporter:	Boris <boris-gentoobugzilla>
Component:	GLSA Errors	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	esigra, kde, security
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	245954
Attachments:	glsa-200804-30.xml.patch

Description Boris 2009-02-24 21:00:01 UTC

The glsa-200804-30.xml misses an uneffected-tag for the new 3.5.10-ebuilds.

I guess this is probably a bug and kdelibs-3.5.10-r2 is not really affected, right?

Reproducible: Always

Steps to Reproduce:

Comment 1 Boris 2009-02-24 21:02:06 UTC

Created attachment 183073 [details, diff]
glsa-200804-30.xml.patch

Comment 2 Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure

2009-05-28 00:06:33 UTC

Let's ask the security team to clear this up.

Comment 3 Robert Buchholz (RETIRED) gentoo-dev

2009-05-28 09:07:08 UTC

correct, this is a GLSA error.

Comment 4 Robert Buchholz (RETIRED) gentoo-dev

2009-05-28 16:57:22 UTC

This has been fixed here:

----------------------------
revision 1.2
date: 2009-04-08 13:43:25 +0200;  author: py;  state: Exp;  lines: +2 -1;  commitid: 69be49dc8dbd4567;
Adding 3.5.10 branch as unaffected (bug #263868)


*** This bug has been marked as a duplicate of bug 263868 ***