Your message dated Mon, 15 Sep 2014 06:49:02 +0000
with message-id <[email protected]>
and subject line Bug#760561: fixed in tribler 6.3.1+git20140902.9a5a2604-2
has caused the Debian Bug report #760561,
regarding Output redirection lets local users overwrite any file writable by
the caller
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
760561: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760561
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tribler
Version: 6.2.0+git20130731.149555fa-2
Tags: security
The script /usr/bin/tribler redirects its output to /tmp/$USER-tribler.log. If
an attacker creates a symlink with this name pointing to one of the user's
files, this file would be overwritten.
The safe way to create a file in a world-writable directory like /tmp is
mktemp(1).
--- End Message ---
--- Begin Message ---
Source: tribler
Source-Version: 6.3.1+git20140902.9a5a2604-2
We believe that the bug you reported is fixed in the latest version of
tribler, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ying-Chun Liu (PaulLiu) <[email protected]> (supplier of updated tribler
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Sep 2014 14:03:11 +0800
Source: tribler
Binary: tribler tribler-swift
Architecture: source all i386
Version: 6.3.1+git20140902.9a5a2604-2
Distribution: unstable
Urgency: low
Maintainer: Ying-Chun Liu (PaulLiu) <[email protected]>
Changed-By: Ying-Chun Liu (PaulLiu) <[email protected]>
Description:
tribler - Python based Bittorrent/Internet TV application
tribler-swift - Fast peer-to-peer file distribution helper program for tribler.
Closes: 760561
Changes:
tribler (6.3.1+git20140902.9a5a2604-2) unstable; urgency=low
.
* Use mktemp to generate log file in tmp. (Closes: #760561)
* Update debian/copyright to fix the license short name missing.
* Use libjs-excanvas.
Checksums-Sha1:
427cf9b71746b7152ab4f6d1f8810844690958ba 1985
tribler_6.3.1+git20140902.9a5a2604-2.dsc
aa1fe532e12812c1533e32decc3cff4a7f73d4e6 7336
tribler_6.3.1+git20140902.9a5a2604-2.debian.tar.xz
5ec04f982095cc7ad76c0da3946be7ccef809583 1555204
tribler_6.3.1+git20140902.9a5a2604-2_all.deb
cea403d015cdec479c1221c1c92a1e7261448f84 3030784
tribler-swift_6.3.1+git20140902.9a5a2604-2_i386.deb
Checksums-Sha256:
01a8f341aef0e8774d55730a1288b7b35c4bb8b5396d4c7db959c11ef275f4c4 1985
tribler_6.3.1+git20140902.9a5a2604-2.dsc
457d7929abf042c667ca988260014dc0e8857532b25a457f9d22b610dc8272fa 7336
tribler_6.3.1+git20140902.9a5a2604-2.debian.tar.xz
36965e2333bdc9bfdce4a24098b8006da51c535096fa85b2ecf3542b1adbafd3 1555204
tribler_6.3.1+git20140902.9a5a2604-2_all.deb
0990a24a95da9fa9ac2b3d6b3aece9f759d31d45dce6380032b0fb5ee00fc95a 3030784
tribler-swift_6.3.1+git20140902.9a5a2604-2_i386.deb
Files:
c3f7cbac997826a9054a87be56400a50 1555204 net optional
tribler_6.3.1+git20140902.9a5a2604-2_all.deb
36fed13f0116595e0bf4a262a81b88c9 3030784 net optional
tribler-swift_6.3.1+git20140902.9a5a2604-2_i386.deb
e669ac6b8fb60f43dc4dee0a3bbd6ea9 1985 net optional
tribler_6.3.1+git20140902.9a5a2604-2.dsc
9e8c031cb18201fe8efcbfee0db4ffef 7336 net optional
tribler_6.3.1+git20140902.9a5a2604-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJUFoemAAoJEEQXP6E9BYiIWTwP/Rs7kQ+ZmkNFs4181DI/8pnu
TsXZNtZCafiHu0pTWzpeEyJLOmjzhGM8X1/mAvafNN6wNSW89ftK9TTitIemHg10
+2NHNEx6+lwxX9brjZeMRHTmxoFwMNla0GYiKCzP0knvtmyzvtrLW1v+q5N51nj3
HxIY+KvT2vd9QLLe+ltcSeyQ14B7n6e3ktHFCbFdwhEZOaZ7dekzwTD1IlxZkP42
OJxe6dwbk1nLHcnxqcsgGL17E9/ckIwNHk+HHm1MM7VEgDEoNzBGH9BQR9ceV+ao
nVP/FmMZ7wssnMbZX4ZRbvR4M0BHkBWgxaMn5MRIBAmRVksXRRZsGFIhC7scBczp
YvpZCp8/eK/T28iBwhKifQDK7+2B+cmoPR3dZm8Bj/aCjaSZIL3REBW8mzit/8rc
pvC7gjV2Iwe/hnha5+pIuZFk9ZiFGr0AHelf2DXoFt3z5MXSy0NcGvPGESdh5bvx
Yn5wHVSyIdmdGGfArq9Ddgp+IuXlYHr7CrSz1c61p4f+hXozV4jD6v+EuZLRUDHE
O/ELAsgOXHRgwiXefyI3las1f6FscpltP2YuaLM4QguD8ahisZNHfc7hxjjj6Umj
JiycVSjJUKC2H2tNbG5EJeqNVX/nt8GjyuQLKaT8RlifF/a/OSQyak3+i3oQxrgy
PoUN2aqKHipkJRigiiwu
=89Vg
-----END PGP SIGNATURE-----
--- End Message ---
