[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Uploaded man-db 2.3.10-69i (sparc) to master



-----BEGIN PGP SIGNED MESSAGE-----

Format: 1.6
Date: Wed,  9 Jun 1999 10:37:29 +0300
Source: man-db
Binary: man-db
Architecture: sparc
Version: 2.3.10-69i
Distribution: unstable
Urgency: low
Maintainer: Debian SPARC Build Daemon <buildd@marcus.seva.net>
Description: 
 man-db     - Display the on-line manual.
Changes: 
 man-db (2.3.10-69i) unstable; urgency=low
 .
   * In man-db -69i:
   * In man-db -69FIX.1:
    * Added unlink of temporary file between call to tempnam and open to
      reduce (without completely avoiding it) the possibility that a
      malicious user puts a dangling symlink to let man leave a file
      (with a manpage inside :-) in places different that the temporary
      directory. Not a security risk at all, IMO.
    * Added secure open of temporary file in zsoelim.l , thanx to
      Marc Heuse <marc@suse.de>. The code was not secure against a
      symlink attack. This didn't affect 'man', which does not excute
      that part of the code, but only manual execution of zsoelim.
Files: 
 80f66e3192c4fd9af0eaea820c19bede 301858 doc important man-db_2.3.10-69i_sparc.deb

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv

iQCVAwUBN5NePCo9WkFm9rsJAQHv5gQAsC65pvxPfc3hTkHZVxm5ZlxIWD4rZsYC
xmRW5SfWhnOMYkeF8pj3+RiSm3nvB5OBp+1CZR6w/PqUOupft/DywNcVScUwD92G
fQ3Pc6zxlcaeGZ578zy7IO7zAYfroi3Th9kgHYSbfp3xQPG0w+0BR+x+xYv1EMLd
wBaD+sMpwbo=
=AUXu
-----END PGP SIGNATURE-----


Reply to: