Re: text/html change from 1.5.18 to 1.5.20

2010-07-16 Thread Michelle Konzack
Hello Dermot,

Am 2010-07-14 17:03:11, hacktest Du folgendes herunter:
 I do a similar thing with Opera with the following mailcap line:
 text/html; opera %s sleep 1; test=sh -c 'test $DISPLAY'
 
 Have you tried something like:
 text/html; open %s
 or
 text/html; open %s  sleep 1
 
 Shouldn't %s be the preferred form as mutt creates a unique file in
 /tmp, so creating it manually shouldn't be necessary.

No it does not.

The file is always called /tmp/mutt.html and if  you  run  a  Multi-User
Environment and several peoples login using SSH and run mutt you get
the hell on the ass.

This is one of mutts security problems...

Thanks, Greetings and nice Day/Evening
Michelle Konzack

-- 
# Debian GNU/Linux Consultant ##
   Development of Intranet and Embedded Systems with Debian GNU/Linux

itsyst...@tdnet France EURL   itsyst...@tdnet UG (limited liability)
Owner Michelle KonzackOwner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstraße 17
67100 Strasbourg/France   77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

http://www.itsystems.tamay-dogan.net/  http://www.flexray4linux.org/
http://www.debian.tamay-dogan.net/ http://www.can4linux.org/

Jabber linux4miche...@jabber.ccc.de
ICQ#328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/


signature.pgp
Description: Digital signature


Re: text/html change from 1.5.18 to 1.5.20

2010-07-16 Thread Dermot
Hi Michelle,

On 16 July 2010 19:17, Michelle Konzack linux4miche...@tamay-dogan.net wrote:
 Shouldn't %s be the preferred form as mutt creates a unique file in
 /tmp, so creating it manually shouldn't be necessary.

 No it does not.

 The file is always called /tmp/mutt.html and if  you  run  a  Multi-User
 Environment and several peoples login using SSH and run mutt you get
 the hell on the ass.

 This is one of mutts security problems...


You're right, I went to check the changelogs [1] and saw that there
are some Debian patches [2] in versions 1.5.13-1.1, 1.5.20-7 to give
/tmp/muttXX like names. It's been over 5 years since I've used
Mutt in a multiuser environment so I haven't had to worry too much
about the tmp files.


 Thanks, Greetings and nice Day/Evening
    Michelle Konzack

 --
 # Debian GNU/Linux Consultant ##
   Development of Intranet and Embedded Systems with Debian GNU/Linux

 itsyst...@tdnet France EURL       itsyst...@tdnet UG (limited liability)
 Owner Michelle Konzack            Owner Michelle Konzack

 Apt. 917 (homeoffice)
 50, rue de Soultz                 Kinzigstraße 17
 67100 Strasbourg/France           77694 Kehl/Germany
 Tel: +33-6-61925193 mobil         Tel: +49-177-9351947 mobil
 Tel: +33-9-52705884 fix

 http://www.itsystems.tamay-dogan.net/  http://www.flexray4linux.org/
 http://www.debian.tamay-dogan.net/         http://www.can4linux.org/

 Jabber linux4miche...@jabber.ccc.de
 ICQ    #328449886

 Linux-User #280138 with the Linux Counter, http://counter.li.org/


[1] 
http://packages.debian.org/changelogs/pool/main/m/mutt/mutt_1.5.20-9/changelog
[2] 
http://patch-tracker.debian.org/patch/series/view/mutt/1.5.20-9/upstream/311296-rand-mktemp.patch

Regards,
Dermot


Re: text/html change from 1.5.18 to 1.5.20

2010-07-16 Thread David Champion
* On 16 Jul 2010, Michelle Konzack wrote: 
  
  Shouldn't %s be the preferred form as mutt creates a unique file in
  /tmp, so creating it manually shouldn't be necessary.
 
 No it does not.
 
 The file is always called /tmp/mutt.html and if  you  run  a  Multi-User
 Environment and several peoples login using SSH and run mutt you get
 the hell on the ass.

http://www.mutt.org/doc/manual/manual.html#toc5.3
5.3 MIME Viewer configuration with mailcap

nametemplate=template

This field specifies the format for the file denoted by %s in the
command fields. Certain programs will require a certain file extension,
for instance, to correctly view a file. For instance, lynx will only
interpret a file as text/html if the file ends in .html. So, you would
specify lynx as a text/html viewer with a line in the mailcap file like:

 text/html; lynx %s; nametemplate=%s.html

-- 
 -D.d...@uchicago.eduIT ServicesUniversity of Chicago


Re: text/html change from 1.5.18 to 1.5.20

2010-07-16 Thread Michelle Konzack
Hello Dermot,

Am 2010-07-16 20:34:39, hacktest Du folgendes herunter:
 You're right, I went to check the changelogs [1] and saw that there
 are some Debian patches [2] in versions 1.5.13-1.1, 1.5.20-7 to give
 /tmp/muttXX like names. It's been over 5 years since I've used
 Mutt in a multiuser environment so I haven't had to worry too much
 about the tmp files.
 
 [1] 
 http://packages.debian.org/changelogs/pool/main/m/mutt/mutt_1.5.20-9/changelog
 [2] 
 http://patch-tracker.debian.org/patch/series/view/mutt/1.5.20-9/upstream/311296-rand-mktemp.patch

The question is: Why do the mutt developer not include this patch?
Such things should be standard.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

-- 
# Debian GNU/Linux Consultant ##
   Development of Intranet and Embedded Systems with Debian GNU/Linux

itsyst...@tdnet France EURL   itsyst...@tdnet UG (limited liability)
Owner Michelle KonzackOwner Michelle Konzack

Apt. 917 (homeoffice)
50, rue de Soultz Kinzigstraße 17
67100 Strasbourg/France   77694 Kehl/Germany
Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil
Tel: +33-9-52705884 fix

http://www.itsystems.tamay-dogan.net/  http://www.flexray4linux.org/
http://www.debian.tamay-dogan.net/ http://www.can4linux.org/

Jabber linux4miche...@jabber.ccc.de
ICQ#328449886

Linux-User #280138 with the Linux Counter, http://counter.li.org/


signature.pgp
Description: Digital signature