Summary: | <games-board/gnuchess-6.2.4 user input buffer overflow | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sebastian Pipping <sping> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | games |
Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.openwall.com/lists/oss-security/2016/11/14/12 | ||
Whiteboard: | B3 [noglsa] | ||
Package list: |
=games-board/gnuchess-6.2.4
|
Runtime testing required: | --- |
Bug Depends on: | 601976 | ||
Bug Blocks: |
Description
Sebastian Pipping
2016-11-14 20:06:43 UTC
@maintainer(s), package is already in the tree. Please let us know if you are ready to stabilize. I did the last three bumps. No concerns about stabilization with me. @arches, please stabilize: =games-board/gnuchess-6.2.4 amd64 stable x86 stable Stable for PPC64. ppc stable. Maintainer(s), please cleanup. Security, please vote. commit 408857fbcb4c1cd2f2ed9695893cf3133784e60e Author: Sebastian Pipping <sping@g.o> Date: Sun Jan 15 18:06:32 2017 +0100 games-board/gnuchess: Remove vulnerable (bug #599730) Package-Manager: Portage-2.3.3, Repoman-2.3.1 games-board/gnuchess/Manifest | 2 -- games-board/gnuchess/gnuchess-6.2.2-r1.ebuild | 29 --------------------------- games-board/gnuchess/gnuchess-6.2.3.ebuild | 20 ------------------ 3 files changed, 51 deletions(-) https://github.com/gentoo/gentoo/commit/408857fbcb4c1cd2f2ed9695893cf3133784e60e (In reply to Sebastian Pipping from comment #8) > commit 408857fbcb4c1cd2f2ed9695893cf3133784e60e Needed to revert that because =games-board/gnuchess-book-1.02 depends on <games-board/gnuchess-6.2.3 and =games-board/gnuchess-book-1.02-r1 without that dependency is not yet marked stable. So bug #601976 is a blocker for removal now. Bug #601976 fixed now, vulnerable versions removed by soap: games-board/gnuchess: Remove old https://github.com/gentoo/gentoo/commit/ef4e62ddc7ae979365f4d12122c14a30decaeb80 GLSA Vote: No Repository is clean. |