[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[debian-devel:10494] Re: Uploaded man-db-ja 2.3.10-69FIX.1 (source i386) to master-jp
well known な security hole をそのままにしておきすぎなので
NMU しておきます。確認よろしく
--
鵜飼文敏
At Fri, 1 Oct 1999 02:47:00 +0900,
ukai@debian.or.jp wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
>
> Format: 1.5
> Date: Thu, 30 Sep 1999 15:50:36 +0900
> Source: man-db-ja
> Binary: man-db-ja
> Architecture: source i386
> Version: 2.3.10-69FIX.1
> Distribution: stable
> Urgency: low
> Maintainer: Fumitoshi UKAI <ukai@debian.or.jp>
> Description:
> man-db-ja - Display the on-line manual (JAPANESE EXTENDED).
> Changes:
> man-db-ja (2.3.10-69FIX.1) stable; urgency=low
> .
> * In man-db -69FIX.1:
> * Added unlink of temporary file between call to tempnam and open to
> reduce (without completely avoiding it) the possibility that a
> malicious user puts a dangling symlink to let man leave a file
> (with a manpage inside :-) in places different that the temporary
> directory. Not a security risk at all, IMO.
> * Added secure open of temporary file in zsoelim.l , thanx to
> Marc Heuse <marc@xxxxxxx>. The code was not secure against a
> symlink attack. This didn't affect 'man', which does not excute
> that part of the code, but only manual execution of zsoelim.
> * In man-db -69: (Sun, 29 Nov 1998 01:01:54 +0200)
> * Corrected wrong set of terminal modes even when "not-a-tty".
> (thanx to Alessandro Rubini for the report)
> Files:
> b1a44999a8f76c4a3869f3b39a0a264f 653 doc important man-db-ja_2.3.10-69FIX.1.dsc
> c7f252520b74256f992931bfd1f23b32 199137 doc important man-db-ja_2.3.10-69FIX.1.diff.gz
> 1f51b7ae0524439c301602ff0696a7dc 305698 doc important man-db-ja_2.3.10-69FIX.1_i386.deb
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3ia
> Charset: noconv
>
> iQCVAwUBN/MMgM9xwSV+IhjlAQH1zgP+NkLtnJJvv04SDPS3zYZLa3ppVmEtyIHw
> FUcdVYVyq6X3lJNnt0ZUtPjdg/ZUjtxU1eAFUvZeC31qUA00K/zZKIIoQ8v0BNdm
> vM4bOTisz/808P6+VcTo5t1T0FRMGGkzFcyvw/Oq2lz6gaC/IbwiwQ3zgnfcSnZO
> 3HCKsiFvC6Y=
> =mv4p
> -----END PGP SIGNATURE-----
>