Control: tags 841722 + pending

Dear maintainer,

I've prepared an NMU for libpaper (versioned as 1.1.24+nmu5) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

Regards.

-- 
Jonathan Wiltshire                                      [email protected]
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

diff -Nru libpaper-1.1.24+nmu4/debian/changelog libpaper-1.1.24+nmu5/debian/changelog
--- libpaper-1.1.24+nmu4/debian/changelog	2014-11-01 13:35:13.000000000 +0000
+++ libpaper-1.1.24+nmu5/debian/changelog	2016-11-11 11:28:37.000000000 +0000
@@ -1,3 +1,12 @@
+libpaper (1.1.24+nmu5) unstable; urgency=medium
+
+  [ Helmut Grohne ]
+  * Non-maintainer upload.
+  * Fix /tmp file vulnerability in debian/rules clean target
+    (Closes: #841722)
+
+ -- Jonathan Wiltshire <[email protected]>  Fri, 11 Nov 2016 11:28:37 +0000
+
 libpaper (1.1.24+nmu4) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru libpaper-1.1.24+nmu4/debian/rules libpaper-1.1.24+nmu5/debian/rules
--- libpaper-1.1.24+nmu4/debian/rules	2014-11-01 13:35:13.000000000 +0000
+++ libpaper-1.1.24+nmu5/debian/rules	2016-11-11 11:28:35.000000000 +0000
@@ -64,10 +64,10 @@
 	[ ! -f Makefile ] || $(MAKE) distclean
 	dh_autoreconf_clean
 	dh_clean
-	exec > /tmp/libpaper1.new \
+	exec > debian/libpaper1.config.new \
 		&& sed -n '1,/^__BEGIN_PAPERSPECS__/p' debian/libpaper1.config \
 		&& sed -n '/^__END_PAPERSPECS__/,$$p' debian/libpaper1.config
-	mv /tmp/libpaper1.new debian/libpaper1.config
+	mv debian/libpaper1.config.new debian/libpaper1.config
 
 binary-indep:	DH_OPTIONS=-i
 binary-indep:	checkroot build

Reply via email to