[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#480972: vulnerable to symlink attacks



Hi Sune,
* Sune Vuorela <Sune@vuorela.dk> [2008-05-18 21:35]:
> On Tuesday 13 May 2008, Marco d'Itri wrote:
> > Security team: libuu-dev is a static-only library (see #216593).
> > klibido, nget and slrn build-depend on libuu-dev, while
> > libconvert-uulib-perl and kde (I don't know exactly which package,
> > look in the kdesupport directory) contain an embedded copy.
> 
> I tried locating it in kde (kdesupport directory). I could find it thru google 
> code search in a  ancient (probably kde 1) tarball on some openbsd mirrors.
> 
> But I couldn't find it in neither kde3 or kde4.
> 
> (I looked for the file mentioned ..)

Yes, same here. Looks like some deprecated package for kde 
libs. I couldn't find that either in current source 
packages. Marco, where did you get this information?

Kind regards
Nico
-- 
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpCxY5stC9en.pgp
Description: PGP signature


Reply to: