[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#2311: svgalib has undocumented setuid program in /usr/doc/examples



Package: svgalib
Version: 1.28-2

svgalib has undocumented setuid program in /usr/doc/examples

$ dpkg-deb --contents svgalib-1.28-2.deb | grep 3d
-rwsr-xr-x root/root     91140 Jan  7 14:58 1996 usr/doc/examples/svgalib/3d
$ zgrep 3d `dpkg -L svgalib` 2>/dev/null | grep -v ........................................................................................................................................................................................................ | cat -v
/usr/lib/libvga.so.1.2.8:clocks^@ %3d^@
/usr/lib/libvga.so.1.2.8:^@%4ux%4ux%2u: ^@Interlaced^@Non-Interlaced^@%3d MHz Clock, %6.3f KHz horz., %6.3f Hz vert.,
/usr/doc/examples/svgalib/clut.xbm: 0xe0,0x3d,0x00,0xe0,0x31,0x00,0xc0,0x10,0x00,0x00,0x08,0x00,0x20,0x1e,0x00,
/usr/doc/examples/svgalib/clut.xbm: 0xe0,0x3d,0x00,0xe0,0x19,0x00,0xc0,0x00,0x00};
/usr/doc/examples/svgalib/speedtest.c:    printf("Timing: %3d.%1ds, %dK/s\n", diff_clock / 100,

--
Raul


Reply to: