Summary: | app-arch/star suid root vulnerability | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Wolfram Schlich (RETIRED) <wschlich> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | lostlogic |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | All | ||
URL: | https://lists.berlios.de/pipermail/star-users/2004-August/000239.html | ||
Whiteboard: | C1 [glsa] jaervosz | ||
Package list: | Runtime testing required: | --- |
Description
Wolfram Schlich (RETIRED)
2004-08-26 05:50:49 UTC
lostlogic you bumped last time please bump to latest version. Currently no more info on the issue. Bump compiles fine. ebuild bumped to star-1.5_alpha46 (Runtime needs testing) Arches please test and mark stable. Sparc tasty. Stable on alpha. tested and stable on ppc greetings Reassigning Product/Component as this is not a GLSA error, it's a security bug. stable on amd64 Local priv escalation. x86 please mark stable Stable on IA64. stable on x86 GLSA-ready hppa stable now GLSA 200409-11 The GLSA sent our for this bug has an error <unaffected range="ge">star-1.5_alpha46</unaffected> <vulnerable range="lt">star-1.5_alpha46</vulnerable> Should read: <unaffected range="ge">1.5_alpha46</unaffected> <vulnerable range="lt">1.5_alpha46</vulnerable> Ref: http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml?passthru=1 Thanks Kugelfang/solar. Should be fixed in the tree. |