687476 – app-crypt/libu2f-host: stabilization request for 1.1.10

Bug 687476 - app-crypt/libu2f-host: stabilization request for 1.1.10

Summary: app-crypt/libu2f-host: stabilization request for 1.1.10

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Stabilization (show other bugs)
Hardware:	All Linux

Importance:	Normal major (vote)
Assignee:	Crypto team [DISABLED]

URL:
Whiteboard:
Keywords:	STABLEREQ

Depends on:
Blocks:

Reported:	2019-06-05 20:28 UTC by Göktürk Yüksek
Modified:	2019-06-08 18:13 UTC (History)
CC List:	0 users

See Also:	CVE-2018-20340 CVE-2019-9578
Package list:	=app-crypt/libu2f-host-1.1.10
Runtime testing required:	Yes

Flags:	stable-bot: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Göktürk Yüksek archtester

2019-06-05 20:28:23 UTC

Hi,

Older versions of app-crypt/libu2f-host suffer from two existing security bugs (#678580, #679724). Can we do a fast stabilization here so we can clean the vulnerable versions from the tree?

Thanks,

Comment 1 Mikle Kolyada (RETIRED) archtester

2019-06-07 20:13:50 UTC

amd64 stable

Comment 2 Agostino Sarubbo gentoo-dev

2019-06-08 18:13:32 UTC

x86 stable. Closing.