Bug 684218

Summary:	net-misc/electrum-ltc: phishing attack
Product:	Gentoo Security	Reporter:	Daniel Dawson <danielcdawson>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	zmedico
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [noglsa]
Package list:		Runtime testing required:	---

Description Daniel Dawson 2019-04-24 03:12:42 UTC

The current version in Gentoo is very out of date. A newer version is needed (latest is 3.3.4.1 upstream), for a number of reasons, but the most important is that it doesn't even work now because public servers are rejecting pre-3.3 versions due to a vulnerability (see announcement at https://electrum-ltc.org/ ).

Comment 1 Larry the Git Cow gentoo-dev

2019-04-25 03:54:44 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d4fb41d42468f72dd73c7535d95bb816f12a7f62

commit d4fb41d42468f72dd73c7535d95bb816f12a7f62
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-04-25 03:49:52 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-04-25 03:54:35 +0000

    net-misc/electrum-ltc: remove old version
    
    Bug: https://bugs.gentoo.org/684218
    Package-Manager: Portage-2.3.64, Repoman-2.3.12
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 net-misc/electrum-ltc/Manifest                     |   1 -
 net-misc/electrum-ltc/electrum-ltc-3.0.6.2.ebuild  | 152 ---------------------
 .../electrum-ltc/files/2.8.0-no-user-root.patch    |  15 --
 3 files changed, 168 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=489c63f236db243320a634914e16bbe0bdf6f054

commit 489c63f236db243320a634914e16bbe0bdf6f054
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2019-04-24 20:14:39 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2019-04-25 03:54:34 +0000

    net-misc/electrum-ltc: version bump to 3.3.4.1
    
    Bug: https://bugs.gentoo.org/684218
    Package-Manager: Portage-2.3.64, Repoman-2.3.12
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 net-misc/electrum-ltc/Manifest                     |   1 +
 net-misc/electrum-ltc/electrum-ltc-3.3.4.1.ebuild  | 155 +++++++++++++++++++++
 .../electrum-ltc/files/3.1.2-no-user-root.patch    |  17 +++
 .../files/3.2.3-pip-optional-pkgs.patch            |  11 ++
 net-misc/electrum-ltc/files/3.3.2-desktop.patch    |  20 +++
 5 files changed, 204 insertions(+)

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2019-04-25 03:59:20 UTC

tree is clean