Bug 296954

Summary:	net-libs/libnetdude bundles a copy of libltdl
Product:	Gentoo Linux	Reporter:	Diego Elio Pettenò (RETIRED) <flameeyes>
Component:	New packages	Assignee:	Gentoo Netmon project <netmon>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	esigra, security
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2009-12-14 22:16:47 UTC

And since that's also likely an older version that is vulnerable to <libtool-2.2.6b problems, it should be verified.

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 11:01:13 UTC

Vulnerable to CVE-2009-3736

Comment 2 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 11:07:02 UTC

# Samuli Suominen <ssuominen@gentoo.org> (03 Mar 2010)
# Masked for QA, security
#
# Internal copy of vuln. libltdl, CVE-2009-3736
#
# Bugs 252402, 296953, 296954, 215252, 297649
#
# Masked for removal in 60 days
net-libs/libnetdude
net-analyzer/netdude
net-im/naim

Comment 3 Samuli Suominen (RETIRED) gentoo-dev

2010-04-06 17:34:20 UTC

And removed from tree.