[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: devscripts lenny update (#507482)

Adam D. Barratt wrote:
> On Fri, 2009-01-09 at 07:53 +0100, Luk Claes wrote:
>> Adam D. Barratt wrote:
>>> Hi,
>>> The devscripts package in lenny has an insecure temporary directory
>>> issue when signing files which are copied from a remote machine; see
>>> #507482.
>>> Would fixing this be suitable for a(nother) lenny update for the
>>> package? I've attached a minimal debdiff.
>> Please upload.
> Thanks.
> Whilst doing some final testing, I noticed that the patch had a couple
> of issues (repeating messages if aborting with signed files which needed
> copying back to a remote host and not including the directory component
> of the temporary directory in the messages).
> As the changes were very small, I guessed they would be ok but have
> attached an updated debdiff for confirmation.

Confirmed :-)



Reply to: