| Summary: | <app-arch/qpress-20220819: directory traversal (+ dead upstream, need to switch upstreams?) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | trivial | CC: | azamat.hackimov, proxy-maint |
| Priority: | Normal | Keywords: | PullRequest |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| See Also: | https://github.com/gentoo/gentoo/pull/28438 | ||
| Whiteboard: | ~4 [noglsa] | ||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 882779 | ||
|
Description
John Helmert III
2022-11-24 15:59:20 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=425fdd4a020ecff998e19036cd41ddf70c56d54d commit 425fdd4a020ecff998e19036cd41ddf70c56d54d Author: Azamat H. Hackimov <azamat.hackimov@gmail.com> AuthorDate: 2022-11-26 13:14:09 +0000 Commit: Joonas Niilola <juippis@gentoo.org> CommitDate: 2022-12-09 06:53:59 +0000 app-arch/qpress: drop 1.1-r1 Signed-off-by: Azamat H. Hackimov <azamat.hackimov@gmail.com> Bug: https://bugs.gentoo.org/882781 Closes: https://github.com/gentoo/gentoo/pull/28438 Signed-off-by: Joonas Niilola <juippis@gentoo.org> app-arch/qpress/Manifest | 1 - .../qpress/files/qpress-1.1-fix-build-system.patch | 7 ----- .../qpress/files/qpress-1.1-fix-includes.patch | 7 ----- app-arch/qpress/qpress-1.1-r1.ebuild | 31 ---------------------- 4 files changed, 46 deletions(-) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f046a0bd4a5220df8394193834dffe017c43df76 commit f046a0bd4a5220df8394193834dffe017c43df76 Author: Azamat H. Hackimov <azamat.hackimov@gmail.com> AuthorDate: 2022-11-26 13:11:35 +0000 Commit: Joonas Niilola <juippis@gentoo.org> CommitDate: 2022-12-09 06:53:59 +0000 app-arch/qpress: add 20220819 version Switch to new upstream, fix security issue CVE-2022-45866. Bug: https://bugs.gentoo.org/882781 Signed-off-by: Azamat H. Hackimov <azamat.hackimov@gmail.com> Signed-off-by: Joonas Niilola <juippis@gentoo.org> app-arch/qpress/Manifest | 1 + .../files/qpress-20220819-fix-build-system.patch | 40 ++++++++++++++++++++++ app-arch/qpress/metadata.xml | 3 ++ app-arch/qpress/qpress-20220819.ebuild | 21 ++++++++++++ 4 files changed, 65 insertions(+) Thanks! All done, it seems. |