252402 – net-analyzer/netdude bundles its own copy of libltdl.

Bug 252402 - net-analyzer/netdude bundles its own copy of libltdl.

Summary: net-analyzer/netdude bundles its own copy of libltdl.

Status:	RESOLVED WONTFIX

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Netmon project

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	bundled-libs
	Show dependency tree

Reported:	2008-12-24 15:53 UTC by Diego Elio Pettenò (RETIRED)
Modified:	2010-04-06 17:33 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2008-12-24 15:53:48 UTC

Please see if it's possible to get it to use the system one instead.

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 11:00:55 UTC

Vulnerable to CVE-2009-3736

Comment 2 Samuli Suominen (RETIRED) gentoo-dev

2010-03-03 11:06:43 UTC

# Samuli Suominen <ssuominen@gentoo.org> (03 Mar 2010)
# Masked for QA, security
#
# Internal copy of vuln. libltdl, CVE-2009-3736
#
# Bugs 252402, 296953, 296954, 215252, 297649
#
# Masked for removal in 60 days
net-libs/libnetdude
net-analyzer/netdude
net-im/naim

Comment 3 Samuli Suominen (RETIRED) gentoo-dev

2010-04-06 17:33:59 UTC

And removed from tree.