AdobeReader_sve providing libstdc++.so.6 - malicious?

[Jonathan Underwood]

On 27 May 2010 23:00, Michael Schwendt <mschwendt at gmail.com> wrote:
> It's a packaging mistake in a package that hasn't seen much testing.
> If they include local copies of libs like libstdc++, they ought to
> filter the RPM Provides. They also provide several other libs, not
> limited to libgcc_s.so.1
>
> $ repoquery --provides AdobeReader_sve|grep ^lib|wc -l
> 59
>
> $ repoquery --whatprovides 'libstdc++.so.6(CXXABI_1.3)'
> AdobeReader_nor-0:8.1.7-1.i486
> AdobeReader_ita-0:8.1.7-1.i486
> AdobeReader_suo-0:8.1.7-1.i486
> AdobeReader_kor-0:8.1.7-1.i486
> AdobeReader_sve-0:8.1.7-1.i486
> libstdc++-0:4.4.4-2.fc13.i686
> AdobeReader_dan-0:8.1.7-1.i486
> AdobeReader_ptb-0:8.1.7-1.i486
> AdobeReader_chs-0:8.1.7-1.i486
> AdobeReader_esp-0:8.1.7-1.i486
> AdobeReader_nld-0:8.1.7-1.i486
> AdobeReader_cht-0:8.1.7-1.i486

Yeah, I added an exlude=AdobeReader* to the adobe.repo file, which
stopped this messing things up.