Please sync nvi 1.81.6-4 (universe) from Debian unstable (main).
Bug #262363 reported by
Michael Bienia
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
nvi (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned |
Bug Description
Binary package hint: nvi
Please sync nvi 1.81.6-4 (universe) from Debian unstable (main).
Changelog since current intrepid version 1.81.6-3:
nvi (1.81.6-4) unstable; urgency=high
* Safeguard the creation of /var/tmp/vi.recover in the postinst
against symlink attacks. Thanks Raphael Geissert for spotting
this. RC security bug, urgency bumped. Closes: #496462.
-- Jan Christoph Nordholz <email address hidden> Mon, 25 Aug 2008 19:43:31 +0200
Changed in nvi: | |
importance: | Undecided → Wishlist |
status: | New → Confirmed |
To post a comment you must log in.
[Updating] nvi (1.81.6-3 [Ubuntu] < 1.81.6-4 [Debian]) ftp.debian. org/debian/> 81.6.orig. tar.gz: already in distro - downloading from librarian> 81.6-4. diff.gz: downloading from http:// ftp.debian. org/debian/>
* Trying to add nvi...
- <nvi_1.81.6-4.dsc: downloading from http://
- <nvi_1.
- <nvi_1.
I: nvi [universe] -> nvi_1.81.6-3 [universe].
I: nvi [universe] -> nvi-doc_1.81.6-3 [universe].