Bug#318285: CAN-2005-2240 symlink attack in xpvm.tcl
On Fri, Jul 15, 2005 at 01:47:44PM +0200, Frank Lichtenheld wrote:
> On Thu, Jul 14, 2005 at 05:27:33PM +0300, Joey Hess wrote:
> > According to http://secunia.com/advisories/16040:
>
> Some investigation on it:
> There is a tempfile procedure available in tcllib, one could either
> use that or copy&paste (since it isn't available in tcllib in woody)
>
> @security team: Should I cook up a patch for that?
Hmm, tried that and failed. Unfortunatly it requires more TCL knowledge
than I have.
Gruesse,
--
Frank Lichtenheld <djpig@debian.org>
www: http://www.djpig.de/
Reply to: