Bug 273108

Summary:	sys-cluster/openmpi bundles an internal copy of libltdl
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	New packages	Assignee:	Justin Bronder (RETIRED) <jsbronder>
Status:	RESOLVED FIXED
Severity:	normal	CC:	cluster, esigra, security
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2009-06-07 20:32:10 UTC

That's not uncommon I have to say.

Comment 1 Justin Bronder (RETIRED) gentoo-dev

2010-02-25 18:19:21 UTC

I haven't had any luck with this, so if anyone is interested and motivated, please send a patch my way.

Comment 2 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 14:57:07 UTC

vulnerable to CVE-2009-3736, please fix or mask it

Comment 3 Justin Bronder (RETIRED) gentoo-dev

2010-03-03 15:23:10 UTC

1.4.1 was built with 2.2.6b, see #307627.  I'll clear out 1.2.9 when that is closed.

Of course, libtool is still bundled and I'm still asking for help.

Comment 4 Nico Schlömer 2010-12-19 14:14:02 UTC

The Changelog of OpenMPI 1.5.1. says:

- Added --with-libltdl option to allow building Open MPI with an 
  external installation of libltdl.

See http://www.open-mpi.org/community/lists/announce/2010/12/0040.php.

Comment 5 Justin Bronder (RETIRED) gentoo-dev

2015-02-04 21:47:38 UTC

Fixed.  Just under the 6 year window too!

+  04 Feb 2015; Justin Bronder <jsbronder@gentoo.org> +openmpi-1.6.5-r1.ebuild,
+  +openmpi-1.7.5-r1.ebuild, +openmpi-1.8.3-r1.ebuild, +openmpi-1.8.4-r1.ebuild,
+  +files/openmpi-ltdl.patch:
+  Use system libltdl #273108
+