Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André Luís Lopes escreveu: > Hello, > > André Luís Lopes escreveu: >>I'll be following up to this bug with the bug number of the removal >> request as soon as I receive it from BTS. > >As promised, the bug number of the removal request is 496

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, André Luís Lopes escreveu: > >I'll be following up to this bug with the bug number of the removal > request as soon as I receive it from BTS. As promised, the bug number of the removal request is 496432. Regards, !DSPAM:1,48b1edc510

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread André Luís Lopes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, Moritz Muehlenhoff escreveu: > retitle 496432 ibackup: Several symlinks vulnerabilities > thanks > > On Sun, Aug 24, 2008 at 10:05:28PM +0400, Dmitry E. Oboukhov wrote: >> Package: ibackup >> Severity: grave >> >> Hi, maintainer! > > ibackup

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Moritz Muehlenhoff
retitle 496432 ibackup: Several symlinks vulnerabilities thanks On Sun, Aug 24, 2008 at 10:05:28PM +0400, Dmitry E. Oboukhov wrote: > Package: ibackup > Severity: grave > > Hi, maintainer! ibackup indeed needs to be fixed, it is vulnerable to several symlink attacks. And it should be orphaned,

Bug#496432: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dmitry E. Oboukhov
Package: ibackup Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts of packages (marked as executable) were tested. In some packages I've discovered scripts with errors whic