Control: tags 841722 + pending Dear maintainer,
I've prepared an NMU for libpaper (versioned as 1.1.24+nmu5) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. -- Jonathan Wiltshire [email protected] Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
diff -Nru libpaper-1.1.24+nmu4/debian/changelog libpaper-1.1.24+nmu5/debian/changelog --- libpaper-1.1.24+nmu4/debian/changelog 2014-11-01 13:35:13.000000000 +0000 +++ libpaper-1.1.24+nmu5/debian/changelog 2016-11-11 11:28:37.000000000 +0000 @@ -1,3 +1,12 @@ +libpaper (1.1.24+nmu5) unstable; urgency=medium + + [ Helmut Grohne ] + * Non-maintainer upload. + * Fix /tmp file vulnerability in debian/rules clean target + (Closes: #841722) + + -- Jonathan Wiltshire <[email protected]> Fri, 11 Nov 2016 11:28:37 +0000 + libpaper (1.1.24+nmu4) unstable; urgency=medium * Non-maintainer upload. diff -Nru libpaper-1.1.24+nmu4/debian/rules libpaper-1.1.24+nmu5/debian/rules --- libpaper-1.1.24+nmu4/debian/rules 2014-11-01 13:35:13.000000000 +0000 +++ libpaper-1.1.24+nmu5/debian/rules 2016-11-11 11:28:35.000000000 +0000 @@ -64,10 +64,10 @@ [ ! -f Makefile ] || $(MAKE) distclean dh_autoreconf_clean dh_clean - exec > /tmp/libpaper1.new \ + exec > debian/libpaper1.config.new \ && sed -n '1,/^__BEGIN_PAPERSPECS__/p' debian/libpaper1.config \ && sed -n '/^__END_PAPERSPECS__/,$$p' debian/libpaper1.config - mv /tmp/libpaper1.new debian/libpaper1.config + mv debian/libpaper1.config.new debian/libpaper1.config binary-indep: DH_OPTIONS=-i binary-indep: checkroot build

