emul-linux-x86-baselibs-10.2 contains these files which are vulnerable to security bugs fixed in their source packages: * cups-1.2.6: bug 170881, GLSA 200703-28 * file-4.18.tbz2: bug 171452, bug 174217, GLSA 200704-13 * lcms-1.14-r1.tbz2: bug 179156 * libpng-1.2.15.tbz2: bug 178004, bug 195261 * openssl-0.9.8d.tbz2: bug 188799, bug 194039, bug 195634
amd64, please advise.
* sys-auth/nss_ldap should be upgraded to 257.2 or later, see bug 198390.
*** Bug 197467 has been marked as a duplicate of this bug. ***
app-emulation/emul-linux-x86-qtlibs-20071114 in tree ~amd64 + p.masked. This was produced with a new build system. We intend for these ebuilds to go stable in time for releng(really soon)
s/qtlibs/baselibs (my copypasta fails)
Might not be anything rellevant, but emerge gives this: * Messages for package app-emulation/emul-linux-x86-baselibs-20071114: * QA Notice: The following shared libraries lack a SONAME * /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20071114/image/lib32/libnss_ldap-2.5.so * QA Notice: Found an absolute symlink in a library directory: * usr/lib32/libslang.so.1 -> /usr/lib32/libslang-utf8.so.1 * It should be a relative symlink if in the same directory * or a linker script if it crosses the /usr boundary. * QA Notice: Found an absolute symlink in a library directory: * usr/lib32/libslang.so.1.4.9 -> /usr/lib32/libslang-utf8.so.1.4.9 * It should be a relative symlink if in the same directory * or a linker script if it crosses the /usr boundary. * QA Notice: Found an absolute symlink in a library directory: * usr/lib32/libslang.so -> /usr/lib32/libslang-utf8.so * It should be a relative symlink if in the same directory * or a linker script if it crosses the /usr boundary.
--- amd64 --- app-emulation/emul-linux-x86-baselibs-20071114 - USE: 1: emerges 2: passes collision-protect, (multilib-)strict, test 3: works (tested with mozilla-*-bin, acroread, googleearth, acroread has multiple font issues but that is for another bug I guess) Portage 2.1.3.19 (default-linux/amd64/2007.0/desktop, gcc-4.1.2, glibc-2.6.1-r0, 2.6.22-gentoo-r9 x86_64) ================================================================= System uname: 2.6.22-gentoo-r9 x86_64 AMD Athlon(tm) 64 X2 Dual Core Processor 4200+ Timestamp of tree: Unknown ccache version 2.4 [enabled] app-shells/bash: 3.2_p17 dev-java/java-config: 1.3.7, 2.0.33-r1 dev-lang/python: 2.4.4-r6 dev-python/pycrypto: 2.0.1-r6 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 1.12.9-r2 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.61-r1 sys-devel/automake: 1.4_p6, 1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.3.16 sys-devel/libtool: 1.5.24 virtual/os-headers: 2.6.22-r2 ACCEPT_KEYWORDS="amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -ggdb -march=athlon64 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/init.d /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-O2 -ggdb -march=athlon64 -pipe" DISTDIR="/tmp/portage" FEATURES="ccache collision-protect distlocks metadata-transfer multilib-strict parallel-fetch sandbox sfperms splitdebug strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://ds.thn.htu.se/linux/gentoo http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ http://mirror.switch.ch/mirror/gentoo/ http://trumpetti.atm.tut.fi/gentoo/" LANG="en_US.utf-8" LINGUAS="en sv" MAKEOPTS="-j3" PKGDIR="/tmp/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/portage/local/private" SYNC="rsync://dx/gentoo-portage" USE="3dnow 3dnowext X a52 aac acpi aiglx alsa amd64 apache2 arts asf avi bash-completion berkdb bitmap-fonts branding browserplugin cairo ccache cdr cli cpudetection cracklib crypt cscope css cups cvs dbus divx divx4linux dlloader dri dvd dvdr dvdread eds emboss encode esd evo fam ffmpeg firefox flac foomaticdb fortran freetype gdbm geoip gif gimp gmedia gnokii gnome gpm gstreamer gtk hal http iconv ieee1394 imap imlib ipv6 isdnlog java javascript jfs jpeg kde kdeenablefinal kdehiddenvisibility kdepim kerberos logitech-mouse mad madwifi maildir midi mikmod mmx mmx2 mmxext mono mozbranding moznopango mozsvg mp3 mpeg mplayer msn mudflap mysql ncurses nls nptl nptlonly nsplugin ntfs nvidia obex ogg oggvorbis opengl openmp oss pam pcre pdf pdflib perl png pppd python qt qt3 qt3support qt4 quicktime readline realmedia reflection reiserfs samba scanner sdl session spell spl sse sse2 ssl subversion svg symlink tcpd tetex theora threads tiff truetype truetype-fonts type1-fonts udev unicode usb v4l v4l2 vim-syntax vim-with-x visualization vorbis wifi wmf wmp wxwindows xcomposite xface xfs xine xinerama xml xorg xosd xpm xprint xv xvid zlib" ALSA_CARDS="emu10k1" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="mouse keyboard evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en sv" USERLAND="GNU" VIDEO_CARDS="nv nvidia" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
These are stable in the tree now...
Sorry, I should have mentioned, removing amd64 now... add us back if we need to do anything further...
emul-linux-x86-baselibs-20071128 is most current. will go stable shortly.
request filed
please merge e2fs >=1.40.3 for bug 201546, we'd include it in this glsa.
latest baselibs fixes CUPS GLSA 200712-14 (bug 201570) Arches, please test and mark stable app-emulation/emul-linux-x86-baselibs-20071230. Target keywords : "amd64"
All done at our end
and perl, bug 198196
I am not sure if this is still valid with app-emulation/emul-linux-x86-baselibs-20081109 :-/
What is pending here that is preventing this old bug from being closed? Thanks a lot for the info :-)
A GLSA needs to be written. Unfortunately, no one had time/was willing to do that. You're welcome to join the security team and help out! :)
I am not sure if GLSA should be written for emul-linux-x86 packages since every update on them fixes all bugs (including security ones) solved by package updated between each emul version :-/
dafuq? * Package: app-emulation/emul-linux-x86-baselibs-20121202 * Repository: gentoo * Maintainer: amd64@gentoo.org * USE: elibc_glibc kernel_linux userland_GNU x86 * FEATURES: distcc sandbox >>> Unpacking source... >>> Unpacking emul-linux-x86-baselibs-20121202.tar.xz to /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/work >>> Source unpacked in /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/work >>> Preparing source in /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/work ... >>> Source prepared. >>> Configuring source in /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/work ... >>> Source configured. >>> Compiling source in /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/work ... >>> Source compiled. >>> Test phase [not enabled]: app-emulation/emul-linux-x86-baselibs-20121202 >>> Install emul-linux-x86-baselibs-20121202 into /var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/image/ category app-emulation * Moving lib32/ to /; some libs might not work mv: ‘/var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/image//usr/lib32’ and ‘/var/tmp/portage/app-emulation/emul-linux-x86-baselibs-20121202/image//usr/lib32’ are the same file * ERROR: app-emulation/emul-linux-x86-baselibs-20121202 failed (install phase): * (no error message) * * Call stack: * ebuild.sh, line 93: Called src_install * environment, line 2198: Called emul-linux-x86_src_install * environment, line 589: Called die * The specific snippet of code: * mv "${D}"/usr/lib32 "${D}"/usr/${x86_libdir} || die;
(In reply to comment #20) > dafuq? exactly. Don't hijack bugs pertaining to other issues. Create new ones after reading through our elaborate explanations on how to file a bug.
This issue was resolved and addressed in GLSA 201412-11 at http://security.gentoo.org/glsa/glsa-201412-11.xml by GLSA coordinator Sean Amoss (ackle).
