Bug#657070: embedded library ltdl

2012-01-23 Thread Mark Purcell
Package: siproxd Version: 1:0.8.1-1 Severity: important Tags: security upstream help siproxd currently ships an embedded copy of the ltdl library. The original version of ltdl shipped was vunerable to 'CVE-2009-3736 local privlege esclation' siproxd upstream (Thomas) have now upgraded the

Bug#657070: embedded library ltdl

2012-01-23 Thread Thomas Ries
Hello Mark, If by chance you (or any other Debian Maintainer) could provide me a temporary user account on a Debian system (with osip2 ltdl libraries and GCC installed) I'll have a look at it and see if I can provide a fix. I'm a bit reluctant to install a Debian here to use it one or twice a

Bug#657070: [Siproxd-users] Bug#657070: embedded library ltdl

2012-01-23 Thread Chí-Thanh Christopher Nguyễn
Mark Purcell schrieb: Whilst siproxd does detect if a system ltdl library is available it does fail to build from source (FTBFS) with the error: plugins.c:65: undefined reference to 'lt__PROGRAM__LTX_preloaded_symbols' Try this workaround from Gentoo: