[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#318285: CAN-2005-2240 symlink attack in xpvm.tcl

On Fri, Jul 15, 2005 at 01:47:44PM +0200, Frank Lichtenheld wrote:
> On Thu, Jul 14, 2005 at 05:27:33PM +0300, Joey Hess wrote:
> > According to http://secunia.com/advisories/16040:
> Some investigation on it:
> There is a tempfile procedure available in tcllib, one could either
> use that or copy&paste (since it isn't available in tcllib in woody)
> @security team: Should I cook up a patch for that?

Hmm, tried that and failed. Unfortunatly it requires more TCL knowledge
than I have.

Frank Lichtenheld <djpig@debian.org>
www: http://www.djpig.de/

Reply to: