Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 251528 - net-nntp/bnr2 bundles an internal copy of zlib-1.1.3 and libpng-1.0.9
Summary: net-nntp/bnr2 bundles an internal copy of zlib-1.1.3 and libpng-1.0.9
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Sven Wegener
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2008-12-18 20:01 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2010-04-06 17:35 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2008-12-18 20:01:31 UTC 
yamato ~ # ./test-zlib /opt/bnr2/lib/libborqt-6.9.0-qt2.3.so
zlib version in /opt/bnr2/lib/libborqt-6.9.0-qt2.3.so: 1.1.3
Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev 2008-12-18 20:03:06 UTC 
yamato ~ # ./test-libpng /opt/bnr2/lib/libborqt-6.9.0-qt2.3.so
libpng version in /opt/bnr2/lib/libborqt-6.9.0-qt2.3.so: 1.0.9
Comment 2 Sven Wegener gentoo-dev 2009-01-06 21:22:28 UTC 
Well, binary only package, there's probably nothing we can do. I can depend on x11-libs/kylixlibs3-borqt, but this doesn't finally solve the issue, the issue then depends on 251737.
Comment 3 Samuli Suominen (RETIRED) gentoo-dev 2010-03-03 11:13:11 UTC 
@security: Check the versions of libpng, zlib, those have several CVEs.

Masked for removal.
Comment 4 Samuli Suominen (RETIRED) gentoo-dev 2010-04-06 17:29:57 UTC 
And removed from tree.
Comment 5 Samuli Suominen (RETIRED) gentoo-dev 2010-04-06 17:34:54 UTC 
Reopen for correct resolution...