Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 635110 - www-client/elinks bundles a copy of gettext
Summary: www-client/elinks bundles a copy of gettext
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Felix Janda
Keywords: NeedPatch
Depends on:
Blocks: bundled-libs
  Show dependency tree
Reported: 2017-10-22 21:27 UTC by Andreas K. Hüttel
Modified: 2022-10-13 02:10 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Andreas K. Hüttel archtester gentoo-dev 2017-10-22 21:27:08 UTC
www-client/elinks bundles a copy of gettext, which is statically linked into the binary. That's a security vulnerability waiting to happen.

See also bug 635090.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-05-19 18:11:51 UTC
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-08-19 18:19:22 UTC
Comment 3 Felix Janda 2020-08-19 20:31:01 UTC
I've opened an issue upstream:
Comment 4 Larry the Git Cow gentoo-dev 2022-10-13 01:51:44 UTC
The bug has been referenced in the following commit(s):

commit 60077257913d961895b343c5126ee4bdeb77ca3c
Author:     Sam James <>
AuthorDate: 2022-10-13 01:50:51 +0000
Commit:     Sam James <>
CommitDate: 2022-10-13 01:51:18 +0000

    www-client/elinks: add 0.15.1
    Signed-off-by: Sam James <>

 www-client/elinks/Manifest             |   1 +
 www-client/elinks/elinks-0.15.1.ebuild | 148 ++++++++++++++++++++++++++++++
 www-client/elinks/elinks-9999.ebuild   | 162 ++++++++++++++++-----------------
 3 files changed, 228 insertions(+), 83 deletions(-)