Subject: pkg/24511: security issue in libtool-base-1.4.20010614nb16
To: None <gnats-bugs@gnats.netbsd.org>
From: None <syn@sceen.net>
List: netbsd-bugs
Date: 02/21/2004 11:50:54
>Number:         24511
>Category:       pkg
>Synopsis:       security issue in libtool-base-1.4.20010614nb16
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sat Feb 21 10:51:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        NetBSD 1.6.2
>Organization:
Richard Braun
>Environment:
System: NetBSD skywalker.sceen 1.6.2 NetBSD 1.6.2 (SKYWALKER) #0: Sun Feb 1 09:52:43 CET 2004 syn@skywalker.sceen:/usr/src/sys/arch/i386/compile/SKYWALKER i386
Architecture: i386
Machine: i386
>Description:
[syn@skywalker syn]$ audit-packages 
Package libtool-base-1.4.20010614nb16 has a local-symlink-race vulnerability, see http://www.securityfocus.com/archive/1/352519

Could this security issue be fixed in pkgsrc-2003Q4 ? Thanks.

>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: