Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 771816 - <app-misc/detox-1.4.2: Buffer overflow in untrusted filename
Summary: <app-misc/detox-1.4.2: Buffer overflow in untrusted filename
Status: IN_PROGRESS
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B3 [glsa?]
Keywords:
Depends on:
Blocks: EAPI5Removal
  Show dependency tree
 
Reported: 2021-02-21 05:26 UTC by Sam James
Modified: 2021-10-14 09:44 UTC (History)
1 user (show)

See Also:
Package list:
app-misc/detox-1.4.2
Runtime testing required: ---
nattka: sanity-check-


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester gentoo-dev Security 2021-02-21 05:26:44 UTC
"Fixed a memory overflow bug while reading files from the command line, using
a patch from David Tardon, which was passed on by UsernameRandomlyGenerated."

https://github.com/dharple/detox/issues/56
Comment 1 Sam James archtester gentoo-dev Security 2021-02-21 05:26:57 UTC
Please bump to 1.4.1.
Comment 2 Andreas Sturmlechner gentoo-dev 2021-04-18 08:11:44 UTC
ping
Comment 3 NATTkA bot gentoo-dev 2021-07-29 17:23:55 UTC Comment hidden (obsolete)
Comment 4 NATTkA bot gentoo-dev 2021-07-29 17:32:22 UTC Comment hidden (obsolete)
Comment 5 NATTkA bot gentoo-dev 2021-07-29 17:40:14 UTC Comment hidden (obsolete)
Comment 6 NATTkA bot gentoo-dev 2021-07-29 17:48:25 UTC Comment hidden (obsolete)
Comment 7 NATTkA bot gentoo-dev 2021-07-29 18:04:21 UTC Comment hidden (obsolete)
Comment 8 NATTkA bot gentoo-dev 2021-07-29 18:12:39 UTC Comment hidden (obsolete)
Comment 9 Sam James archtester gentoo-dev Security 2021-08-09 22:26:12 UTC
I bumped this without realising, ugh. Let's stable.
Comment 10 Sam James archtester gentoo-dev Security 2021-08-10 03:02:12 UTC
amd64 done
Comment 11 Sam James archtester gentoo-dev Security 2021-08-10 03:02:43 UTC
x86 done
Comment 12 Sam James archtester gentoo-dev Security 2021-08-10 03:03:35 UTC
ppc done

all arches done
Comment 13 Larry the Git Cow gentoo-dev 2021-08-10 03:04:36 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c393b49370f49c72cffb52190817f5f06d88e4c4

commit c393b49370f49c72cffb52190817f5f06d88e4c4
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-08-10 03:04:23 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-08-10 03:04:23 +0000

    app-misc/detox: drop 1.4.0, 1.4.2
    
    Bug: https://bugs.gentoo.org/771816
    Signed-off-by: Sam James <sam@gentoo.org>

 app-misc/detox/Manifest           |  2 --
 app-misc/detox/detox-1.4.0.ebuild | 42 ---------------------------------------
 app-misc/detox/detox-1.4.2.ebuild | 42 ---------------------------------------
 3 files changed, 86 deletions(-)
Comment 14 Larry the Git Cow gentoo-dev 2021-08-10 03:05:15 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=85a3fbabe1ba97a39e0a80218cd0432bebac0bac

commit 85a3fbabe1ba97a39e0a80218cd0432bebac0bac
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-08-10 03:05:03 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-08-10 03:05:03 +0000

    app-misc/detox: drop 1.4.0
    
    Bug: https://bugs.gentoo.org/771816
    Signed-off-by: Sam James <sam@gentoo.org>

 app-misc/detox/Manifest           |  1 -
 app-misc/detox/detox-1.4.0.ebuild | 42 ---------------------------------------
 2 files changed, 43 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=666e59cd62f719010bc7349031b23f30ece78c08

commit 666e59cd62f719010bc7349031b23f30ece78c08
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-08-10 03:04:47 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-08-10 03:04:47 +0000

    Revert "app-misc/detox: drop 1.4.0, 1.4.2"
    
    This reverts commit c393b49370f49c72cffb52190817f5f06d88e4c4.
    
    Bug: https://bugs.gentoo.org/771816
    Signed-off-by: Sam James <sam@gentoo.org>

 app-misc/detox/Manifest           |  2 ++
 app-misc/detox/detox-1.4.0.ebuild | 42 +++++++++++++++++++++++++++++++++++++++
 app-misc/detox/detox-1.4.2.ebuild | 42 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 86 insertions(+)
Comment 15 NATTkA bot gentoo-dev 2021-10-14 09:44:55 UTC
Unable to check for sanity:

> no match for package: app-misc/detox-1.4.2