Bug 635110

Summary:	www-client/elinks bundles a copy of gettext
Product:	Gentoo Linux	Reporter:	Andreas K. Hüttel <dilfridge>
Component:	Current packages	Assignee:	Felix Janda <felix.janda>
Status:	RESOLVED FIXED
Severity:	normal	CC:	esigra, jstein, proxy-maint, sam
Priority:	Normal	Keywords:	NeedPatch
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=635090 https://github.com/rkd77/felinks/issues/62
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Andreas K. Hüttel archtester

2017-10-22 21:27:08 UTC

www-client/elinks bundles a copy of gettext, which is statically linked into the binary. That's a security vulnerability waiting to happen.

See also bug 635090.

Comment 1 Sam James archtester

2020-05-19 18:11:51 UTC

Ping.

Comment 2 Sam James archtester

2020-08-19 18:19:22 UTC

ping

Comment 3 Felix Janda 2020-08-19 20:31:01 UTC

I've opened an issue upstream: https://github.com/rkd77/felinks/issues/62

Comment 4 Larry the Git Cow gentoo-dev

2022-10-13 01:51:44 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=60077257913d961895b343c5126ee4bdeb77ca3c

commit 60077257913d961895b343c5126ee4bdeb77ca3c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-10-13 01:50:51 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-10-13 01:51:18 +0000

    www-client/elinks: add 0.15.1
    
    Bug: https://bugs.gentoo.org/635110
    Bug: https://bugs.gentoo.org/864127
    Closes: https://bugs.gentoo.org/780672
    Signed-off-by: Sam James <sam@gentoo.org>

 www-client/elinks/Manifest             |   1 +
 www-client/elinks/elinks-0.15.1.ebuild | 148 ++++++++++++++++++++++++++++++
 www-client/elinks/elinks-9999.ebuild   | 162 ++++++++++++++++-----------------
 3 files changed, 228 insertions(+), 83 deletions(-)