Author: nd-guest
Date: 2008-12-27 15:33:32 +0000 (Sat, 27 Dec 2008)
New Revision: 1834
Modified:
packages/gpsdrive/branches/etch/debian/changelog
packages/gpsdrive/branches/etch/debian/rules
Log:
remove gpssmswatch, add changelog entries.
Modified: packages/gpsdrive/branches/etch/debian/changelog
===================================================================
--- packages/gpsdrive/branches/etch/debian/changelog 2008-12-27 15:31:12 UTC
(rev 1833)
+++ packages/gpsdrive/branches/etch/debian/changelog 2008-12-27 15:33:32 UTC
(rev 1834)
@@ -4,6 +4,9 @@
attack (CVE-2008-5380). (Closes: #508595)
* Remove /usr/bin/geo-nearest. Script no longer works with
geocaching.com and uses insecure temporary files.
+ * Remove /usr/bin/gpssmwatch. Script is vulnerable to symlink attacks
+ and would require additional dependencies on gnokii and gpsd.
+ * Remove signalposreq() from src/splash.c to fix a symlink vulnerability.
-- Andreas Putzo <andr...@putzo.net> Fri, 26 Dec 2008 18:26:11 +0000
Modified: packages/gpsdrive/branches/etch/debian/rules
===================================================================
--- packages/gpsdrive/branches/etch/debian/rules 2008-12-27 15:31:12 UTC
(rev 1833)
+++ packages/gpsdrive/branches/etch/debian/rules 2008-12-27 15:33:32 UTC
(rev 1834)
@@ -53,7 +53,9 @@
# Remove gpsd, since debian has an own gpsd package
rm $(destdir)/bin/gpsd
# Remove geo-nearest (#508595)
- rm $(destdir)/bin/geo-nearest
+ rm -f $(destdir)/bin/geo-nearest
+ # Remove gpssmswatch (#508597)
+ rm -f $(destdir)/bin/gpssmswatch
# add old manpages
#cp -r $(CURDIR)/debian/man/ $(destdir)/share/
_______________________________________________
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
