255909 – net-im/centerim bundles an internal forked copy of expat

Bug 255909 - net-im/centerim bundles an internal forked copy of expat

Summary: net-im/centerim bundles an internal forked copy of expat

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Sven Wegener

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	bundled-libs 264606 CVE-2009-3720 CVE-2009-3560 CVE-2012-0876
	Show dependency tree

Reported:	2009-01-22 00:58 UTC by Diego Elio Pettenò (RETIRED)
Modified:	2016-05-06 01:21 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Diego Elio Pettenò (RETIRED) gentoo-dev

2009-01-22 00:58:44 UTC

Yet another expat copy.

Comment 1 Pacho Ramos gentoo-dev

2012-05-16 07:14:40 UTC

But, has been tested centerim-4.22.10 is still vulnerable?

Comment 2 Sebastian Pipping gentoo-dev

2016-05-06 01:21:24 UTC

# git show --stat | sed 's,@gentoo.org,@g.o,'commit 4a4e63b8f5b829198673fe6451bc731fec029e54
Author: Sebastian Pipping <sping@g.o>
Date:   Fri May 6 03:02:06 2016 +0200

    net-im/centerim: Unbundle Expat (bug #255909)

 net-im/centerim/centerim-4.22.10-r1.ebuild         | 131 +++++++++++++++++++++
 .../files/centerim-4.22.10-system-expat.patch      |  51 ++++++++
 2 files changed, 182 insertions(+)