Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 635110 - www-client/elinks bundles a copy of gettext
Summary: www-client/elinks bundles a copy of gettext
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Felix Janda
URL:
Whiteboard:
Keywords: NeedPatch
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2017-10-22 21:27 UTC by Andreas K. Hüttel
Modified: 2022-10-13 02:10 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas K. Hüttel archtester gentoo-dev 2017-10-22 21:27:08 UTC 
www-client/elinks bundles a copy of gettext, which is statically linked into the binary. That's a security vulnerability waiting to happen.

See also bug 635090.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-05-19 18:11:51 UTC 
Ping.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-08-19 18:19:22 UTC 
ping
Comment 3 Felix Janda 2020-08-19 20:31:01 UTC 
I've opened an issue upstream: https://github.com/rkd77/felinks/issues/62
Comment 4 Larry the Git Cow gentoo-dev 2022-10-13 01:51:44 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=60077257913d961895b343c5126ee4bdeb77ca3c

commit 60077257913d961895b343c5126ee4bdeb77ca3c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-10-13 01:50:51 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-10-13 01:51:18 +0000

    www-client/elinks: add 0.15.1
    
    Bug: https://bugs.gentoo.org/635110
    Bug: https://bugs.gentoo.org/864127
    Closes: https://bugs.gentoo.org/780672
    Signed-off-by: Sam James <sam@gentoo.org>

 www-client/elinks/Manifest             |   1 +
 www-client/elinks/elinks-0.15.1.ebuild | 148 ++++++++++++++++++++++++++++++
 www-client/elinks/elinks-9999.ebuild   | 162 ++++++++++++++++-----------------
 3 files changed, 228 insertions(+), 83 deletions(-)