pkgsrc-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
pkg/27016: audit-packages ignores gtk2+ vulnerabilities
>Number: 27016
>Category: pkg
>Synopsis: audit-packages ignores gtk2+ vulnerabilities
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: pkg-manager
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Wed Sep 22 05:17:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator: Christian Biere
>Release: NetBSD 2.0G
>Organization:
>Environment:
System: NetBSD cyclonus 2.0G NetBSD 2.0G (STARSCREAM) #0: Tue Jul 20 02:41:48
CEST 2004 bin@cyclonus:/usr/obj/sys/arch/i386/compile/STARSCREAM i386
Architecture: i386
Machine: i386
>Description:
Apparently, the package gtk2+ was renamed to gtk2 or the list is just wrong.
The list of vulnerabilities regarding GTK+ 2.x lists gtk2 but not gtk2+, so
that the installation of the package x11/gtk2 is ignored.
>How-To-Repeat:
$ /usr/pkg/sbin/audit-packages
>Fix:
Add all vulnerabilities concerning gtk2 also for gtk2+.
>Release-Note:
>Audit-Trail:
>Unformatted:
Home |
Main Index |
Thread Index |
Old Index