Bug#496376: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Steve Langasek
severity 496376 minor thanks The vulnerable scripts are unused bits of packaging that a user should never have occasion to run by hand. Downgrading severity. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can

Bug#496376: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dmitry E. Oboukhov
Package: linux-patch-openswan Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts of packages (marked as executable) were tested. In some packages I've discovered scripts