[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Uploaded man-db 2.3.10-69i (alpha) to master



-----BEGIN PGP SIGNED MESSAGE-----

Format: 1.6
Date: Wed,  9 Jun 1999 10:37:29 +0300
Source: man-db
Binary: man-db
Architecture: alpha
Version: 2.3.10-69i
Distribution: unstable
Urgency: low
Maintainer: AlphaBuildd/John Goerzen <buildd@complete.org>
Description: 
 man-db     - Display the on-line manual.
Changes: 
 man-db (2.3.10-69i) unstable; urgency=low
 .
   * In man-db -69i:
   * In man-db -69FIX.1:
    * Added unlink of temporary file between call to tempnam and open to
      reduce (without completely avoiding it) the possibility that a
      malicious user puts a dangling symlink to let man leave a file
      (with a manpage inside :-) in places different that the temporary
      directory. Not a security risk at all, IMO.
    * Added secure open of temporary file in zsoelim.l , thanx to
      Marc Heuse <marc@suse.de>. The code was not secure against a
      symlink attack. This didn't affect 'man', which does not excute
      that part of the code, but only manual execution of zsoelim.
Files: 
 6075b354b5607bb8ebd3070366d7adad 354078 doc important man-db_2.3.10-69i_alpha.deb

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface

iQEVAwUBN18FI9YJEdzpssC9AQEOQwf9GUz4km6/sc/mRVhA5R5DX9KJP3pxuDR5
F5djRLu6BLoMilvgB8qdLIkLWfuXFS+nCJKfSmpw3YeF9bF7ObdbXVMdR8P+SP+M
h4z8XsQ5wRlyP5AZvUN6DPWXm2ucJG8+G5vpUzLEEzISonWbxi8DIqKX8nLUYsVt
cCCcT+X67eiYk+hLhPXd+R6QB4lJEV/2Nx7Uh+SsI06lp90K0Z2XjQmyswn1YI1F
kHlEnThBE4djacFE/lAOV2EbiCVbCqBUwYFGPQLEykhsQpT3EJkb6SL9QAOYpICq
9yIZNdlf3Xbl2ryW7KQXxgIJaWxF3CMnVXtH0tJ6U6jeNp8CU4E+og==
=T2IV
-----END PGP SIGNATURE-----


Reply to: