252931 – x11-misc/google-gadgets bundles code from unzip

Bug 252931 - x11-misc/google-gadgets bundles code from unzip

Summary: x11-misc/google-gadgets bundles code from unzip

Status:	RESOLVED WONTFIX

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Bernard Cafarelli

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	bundled-libs
	Show dependency tree

Reported:	2008-12-29 01:51 UTC by Diego Elio Pettenò (RETIRED)
Modified:	2013-03-20 14:41 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2008-12-29 01:51:47 UTC

Might be vulnerable to GLSA 200804-06?

Comment 1 Bernard Cafarelli gentoo-dev

2008-12-30 15:21:24 UTC

Bundled sources from unzip do not include inflate.c (vulnerable part from GLSA 200804-06), so it's not affected.

Don't know if using external unzip is easy/feasible, though

Comment 2 Bernard Cafarelli gentoo-dev

2013-03-20 14:41:50 UTC

Package last rites in progress in bug #462472