Gentoo Archives: gentoo-dev

From: Nicolas Peyron <peyronn@××××.fr>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Lastrite: media-sound/teamspeak2-{client,server}-bin (security: copy of libpng 1.0.9)
Date: Tue, 21 Jul 2009 13:45:45
Message-Id: e227f2fcf064f7cce64fe76c6199da16@localhost
In Reply to: Re: [gentoo-dev] Lastrite: media-sound/teamspeak2-{client,server}-bin (security: copy of libpng 1.0.9) by Samuli Suominen
1 On Tue, 21 Jul 2009 16:20:47 +0300, Samuli Suominen <ssuominen@g.o>
2 wrote:
3 > Samuli Suominen wrote:
4 >> # Samuli Suominen <ssuominen@g.o> (21 Jul 2009)
5 >> # Security problems. Internal copies of vulnerable libraries,
6 >> # such as libpng. See, http://bugs.gentoo.org/show_bug.cgi?id=251492
7 >> # Masked for removal.
8 >> media-sound/teamspeak2-server-bin
9 >> media-sound/teamspeak2-client-bin
10 >>
11 >
12 > Also vulnerable copy of libspeex...
13
14 Why server and client both, the server doesn't have a copy of libspeex and
15 doesn't bundle libpng or zlib.

Replies