569650 – (CVE-2015-8621) <sci-biology/t-coffee-11.00: ~/.t_coffee/ is world-writable (CVE-2015-8621)

Bug 569650 (CVE-2015-8621) - <sci-biology/t-coffee-11.00: ~/.t_coffee/ is world-writable (CVE-2015-8621)

Summary: <sci-biology/t-coffee-11.00: ~/.t_coffee/ is world-writable (CVE-2015-8621)

Status:	RESOLVED FIXED

Alias:	CVE-2015-8621

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	http://www.openwall.com/lists/oss-sec...
Whiteboard:	B3 [noglsa/cve]
Keywords:

Depends on:
Blocks:

Reported:	2015-12-24 19:02 UTC by Agostino Sarubbo
Modified:	2016-02-14 18:15 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2015-12-24 19:02:46 UTC

From ${URL} :

Can you assign CVE identifier for t-coffee issue where it creates ~/.t_coffee/
as world-writable directory.

Reported in:
  https://bugs.debian.org/751579



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

Comment 1 Justin Lecher (RETIRED) gentoo-dev

2015-12-25 10:38:30 UTC

commit 15848c4175bd2c42967e5f09128a600f376febd3
Author: Justin Lecher <jlec@gentoo.org>
Date:   Fri Dec 25 11:38:04 2015 +0100

    sci-biology/t-coffee: Import fix for CVE-2015-8621

    Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=569650

    Package-Manager: portage-2.2.26
    Signed-off-by: Justin Lecher <jlec@gentoo.org>

    https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=15848c4175bd2c42967e5f09128a600f376febd3

Comment 2 Justin Lecher (RETIRED) gentoo-dev

2015-12-25 10:38:42 UTC

tree is clean again.

Comment 3 Yury German Gentoo Infrastructure

2016-02-14 18:15:36 UTC

GLSA Vote: No
Thank you all. Closing as noglsa.