[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

New version of nvi for sarge



I just uploaded a new version of nvi (-22) that fixes
some potential security issues in the init script. See
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=298114 for details.
Unlike the proposed patch, the uploaded version does *not* delete files
for "non-regular" users, but simply sends all e-mails to the owner of
the file, rather than the putative destination in the recovery header.

Since this does not touch the actual nvi code, but only the init script,
I think it's safe for inclusion.

Ah, it also includes a fix to the postinst that ensures the vi
recovery file directory (/var/tmp/vi.recovery) is created with proper
permissions. Again, not much potential for regression.

Steve

-- 
Steve Greenland
    The irony is that Bill Gates claims to be making a stable operating
    system and Linus Torvalds claims to be trying to take over the
    world.       -- seen on the net



Reply to: