- Committer: Package Import Robot
- Date: 2009-04-29 08:32:35 UTC
- mfrom: (108.1.2 hardy-proposed)
- Revision ID: package-import@ubuntu.com-20090429083235-sr419eihtjjlhhka
* etc/cron.daily/apport: Only attempt to remove files and symlinks, do not
descend into subdirectories of /var/crash/. Doing so might be exploited by
a race condition between find traversing a huge directory tree, changing
an existing subdir into a symlink to e. g. /etc/, and finally getting that
piped to rm. Patch based on work from Martin Pitt. Thanks to Stephane
Chazelas for discovering this!
- LP: #357024
- CVE-2009-1295
descend into subdirectories of /var/crash/. Doing so might be exploited by
a race condition between find traversing a huge directory tree, changing
an existing subdir into a symlink to e. g. /etc/, and finally getting that
piped to rm. Patch based on work from Martin Pitt. Thanks to Stephane
Chazelas for discovering this!
- LP: #357024
- CVE-2009-1295
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
apport
|
31 | 17 years ago | Package Import Robot | * Move scripts to bin/ in source package. * Add ap |
|
||
|
backends
|
39 | 17 years ago | Package Import Robot | * Introduce abstract packaging interface and move |
|
||
|
bin
|
31 | 17 years ago | Package Import Robot | * Move scripts to bin/ in source package. * Add ap |
|
||
|
cli
|
70 | 17 years ago | Package Import Robot | [ Martin Pitt ] * bin/apport-retrace: Add option - |
|
||
|
debian
|
1 | 17 years ago | Package Import Robot | Initial release. This package implements the clien |
|
||
|
doc
|
52 | 17 years ago | Package Import Robot | * apport/report.py: Fix hook directory to be /us |
|
||
|
general-hooks
|
92 | 16 years ago | Package Import Robot | * bin/crash-digger: Do not crash if duplicate db i |
|
||
|
gtk
|
2 | 17 years ago | Package Import Robot | * debian/apport.cron.daily: Do not produce error m |
|
||
|
man
|
20 | 17 years ago | Package Import Robot | * apport: Renice ourself to priority 5 to not slow |
|
||
|
package-hooks
|
70 | 17 years ago | Package Import Robot | [ Martin Pitt ] * bin/apport-retrace: Add option - |
|
||
|
po
|
2 | 17 years ago | Package Import Robot | * debian/apport.cron.daily: Do not produce error m |
|
||
|
preloadlib
|
9 | 17 years ago | Package Import Robot | * apport: Call objcopy to throw out READONLY/CODE |
|
||
|
qt4
|
51 | 17 years ago | Package Import Robot | New feature: Qt4 GUI implementation: * Added qt4/ |
|
||
|
xdg-mime
|
90 | 16 years ago | Package Import Robot | * apport/ui.py, load_report(): Catch IOError, too. |
|
||
apport.init.fedora |
91 | 16 years ago | Package Import Robot | * bin/apport: Remove code that supported the Edgy | 1.5 KB |
|
|
apport.spec |
91 | 16 years ago | Package Import Robot | * bin/apport: Remove code that supported the Edgy | 5.6 KB |
|
|
|
apport_python_hook.py |
108.1.2 | 15 years ago | Package Import Robot | * debian/control: Update Vcs-Bzr: for the hardy br | 10.5 KB |
|
|
|
COPYING |
38 | 17 years ago | Package Import Robot | * Add ./COPYING: GPL license. * debian/rules: Buil | 17.5 KB |
|
|
|
crashdb.conf |
91 | 16 years ago | Package Import Robot | * bin/apport: Remove code that supported the Edgy | 623 bytes |
|
|
|
problem_report.py |
104 | 16 years ago | Package Import Robot | [ Martin Pitt ] * apport/crashdb_impl/launchpad.py | 42.3 KB |
|
|
|
run-tests |
102 | 16 years ago | Package Import Robot | [ Martin Pitt ] * problem_report.py: Support readi | 1.1 KB |
|
|
|
setup.py |
95 | 16 years ago | Package Import Robot | * general-hooks/automatix.py: Remove hashbang, it' | 1.7 KB |
|
|
|
test-apport |
100 | 16 years ago | Package Import Robot | * bin/crash-digger: Add option --log for logging t | 20.7 KB |
|
|
|
test-crash-digger |
100 | 16 years ago | Package Import Robot | * bin/crash-digger: Add option --log for logging t | 5.2 KB |
|
|
|
test-hooks |
94 | 16 years ago | Package Import Robot | * doc/data-format.tex: Some updates to incorporate | 7.3 KB |
|
|
|
TODO |
100 | 16 years ago | Package Import Robot | * bin/crash-digger: Add option --log for logging t | 896 bytes |
|
|
|
use-local |
100 | 16 years ago | Package Import Robot | * bin/crash-digger: Add option --log for logging t | 102 bytes |
|
|