Uploaded man-db 2.3.10-69i (m68k) to erlangen
-----BEGIN PGP SIGNED MESSAGE-----
Format: 1.6
Date: Wed, 9 Jun 1999 10:37:29 +0300
Source: man-db
Binary: man-db
Architecture: m68k
Version: 2.3.10-69i
Distribution: unstable
Urgency: low
Maintainer: Debian/m68k Build Daemon <buildd@m68k.debian.org>
Description:
man-db - Display the on-line manual.
Changes:
man-db (2.3.10-69i) unstable; urgency=low
.
* In man-db -69i:
* In man-db -69FIX.1:
* Added unlink of temporary file between call to tempnam and open to
reduce (without completely avoiding it) the possibility that a
malicious user puts a dangling symlink to let man leave a file
(with a manpage inside :-) in places different that the temporary
directory. Not a security risk at all, IMO.
* Added secure open of temporary file in zsoelim.l , thanx to
Marc Heuse <marc@suse.de>. The code was not secure against a
symlink attack. This didn't affect 'man', which does not excute
that part of the code, but only manual execution of zsoelim.
Files:
2fc88beafa1451e61d25b3aa67b6ee88 283610 doc important man-db_2.3.10-69i_m68k.deb
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
iQCVAwUBN2YAanVhJ0HiWnvJAQEWbwQAgbGf17lpEcPRwz4GNwZuFEfCi2ENtUe8
zI0EwDjYxvkAnOGwyV+jHs1k1j/8tE2V5K3URn7NtWm9Zp0bJmc38inT05vtk55J
xb2If0MrEObPxke2S8/pOW7fXKJY3oxzw0NB+0MIAfkGDn0Hpq4//z/VlnEFhhzY
A0InCxlbr/A=
=4nOy
-----END PGP SIGNATURE-----
Reply to: