Summary: | net-im/bitlbee: root privilege escalation via "chown -R" in pkg_postinst | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Michael Orlitzky <mjo> |
Component: | Auditing | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | radhermit, security-audit |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/gentoo/pull/14984 | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Michael Orlitzky
2017-09-13 17:43:54 UTC
Unrestricting and reassigning to security@ per bug #705894 unrestricting per bug 705894 The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ed6f485c2830f0ae5ba116cc440dfab05bdaa7db commit ed6f485c2830f0ae5ba116cc440dfab05bdaa7db Author: Petr Vaněk <arkamar@atlas.cz> AuthorDate: 2020-05-01 12:04:33 +0000 Commit: Joonas Niilola <juippis@gentoo.org> CommitDate: 2020-05-05 08:46:35 +0000 net-im/bitlbee: remove unnecessary chown from pkg_postinst phase Closes: https://bugs.gentoo.org/630912 Package-Manager: Portage-2.3.89, Repoman-2.3.20 Signed-off-by: Petr Vaněk <arkamar@atlas.cz> Closes: https://github.com/gentoo/gentoo/pull/14984 Signed-off-by: Joonas Niilola <juippis@gentoo.org> net-im/bitlbee/bitlbee-3.5.1.ebuild | 4 ---- net-im/bitlbee/bitlbee-3.6-r1.ebuild | 4 ---- net-im/bitlbee/bitlbee-9999.ebuild | 4 ---- 3 files changed, 12 deletions(-) |