Bug 833501 – dev-php/PEAR-Crypt_GPG-1.6.7 Security stable request

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Brian Evans (RETIRED) 2022-02-16 19:17:16 UTC]

Please test and mark stable for CVE-2022-24953

Known to fail in portage with the following, likely related to sandboxing:

1) ExportPrivateKeyTest::testExportPrivateKey_with_bad_pass
fwrite(): Write of 5 bytes failed with errno=32 Broken pipe

/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPG/Engine.php:1392                                                          /var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPG/Engine.php:776
/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPG.php:1474                                                                 /var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPG.php:352
/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/tests/ExportPrivateKeyTest.php:115
                                                                                                                                                      2) GeneralTest::testSetEngine
Crypt_GPG_FileException: The 'homedir' "/home/grknight/.gnupg" is not writable by the current user. Please check the permissions on your homedir and m
ake sure the current user can both enter and write to the directory.

/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPG/Engine.php:521
/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/Crypt/GPGAbstract.php:256
/var/tmp/portage/dev-php/PEAR-Crypt_GPG-1.6.7/work/Crypt_GPG-1.6.7/tests/GeneralTest.php:158

[Comment 1 Jakov Smolić 2022-03-07 14:45:57 UTC]

I'm currently hitting bug 834719, should I ignore that one as well?

[Comment 2 Jakov Smolić 2022-03-07 14:46:33 UTC]

(sorry for the delay btw, there was a backlog of bug failures I had to report)

[Comment 3 Sam James 2023-07-05 04:25:16 UTC]

amd64 arm ppc ppc64 sparc x86 (ALLARCHES) done

all arches done