- Committer: Bazaar Package Importer
- Date: 2004-10-26 10:28:26 UTC
- Revision ID: james.westby@ubuntu.com-20041026102826-hej0p6qfbo5z40ex
* SECURITY UPDATE: insecure temporary file and directory handling
(Warty bug #2745)
* patch based on the Fedora update by Mark J. Cox, thanks
* gettext-tools/misc/autopoint.in, gettext-tools/misc/gettextize.in:
method to determine PATH separator created temporary file in an insecure
way; replaced the whole detection part with a simple hardcoding of ':'
(Unix standard)
* gettext-tools/misc/autopoint.in:
- use mktemp to create temporary file (instead of construction with $$)
- check the success of all mkdir calls to protect against symlink attacks
* References:
CAN-2004-0966
http://bugs.debian.org/278283
(Warty bug #2745)
* patch based on the Fedora update by Mark J. Cox, thanks
* gettext-tools/misc/autopoint.in, gettext-tools/misc/gettextize.in:
method to determine PATH separator created temporary file in an insecure
way; replaced the whole detection part with a simple hardcoding of ':'
(Unix standard)
* gettext-tools/misc/autopoint.in:
- use mktemp to create temporary file (instead of construction with $$)
- check the success of all mkdir calls to protect against symlink attacks
* References:
CAN-2004-0966
http://bugs.debian.org/278283
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
autoconf-lib-link
|
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 |
|
||
|
config
|
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 |
|
||
|
debian
|
2 | 22 years ago | Bazaar Package Importer | Modified /etc/emacs/site-start.d/50gettext.el so t |
|
||
|
djgpp
|
1 | 22 years ago | Bazaar Package Importer | Import upstream version 0.10.40 |
|
||
|
gettext-runtime
|
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 |
|
||
|
gettext-tools
|
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 |
|
||
|
os2
|
1 | 22 years ago | Bazaar Package Importer | Import upstream version 0.10.40 |
|
||
|
vms
|
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 |
|
||
aclocal.m4 |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 20.2 KB |
|
|
|
AUTHORS |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 575 bytes |
|
|
|
ChangeLog |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 6.4 KB |
|
|
|
ChangeLog.0 |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 50.9 KB |
|
|
configure |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 98 KB |
|
|
|
configure.ac |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 2.2 KB |
|
|
|
COPYING |
1 | 22 years ago | Bazaar Package Importer | Import upstream version 0.10.40 | 17.5 KB |
|
|
|
INSTALL |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 10.4 KB |
|
|
|
Makefile.am |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 2 KB |
|
|
|
Makefile.in |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 18.1 KB |
|
|
|
Makefile.msvc |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 3.5 KB |
|
|
|
Makefile.vms |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 2.2 KB |
|
|
|
NEWS |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 18.6 KB |
|
|
|
PACKAGING |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 5.1 KB |
|
|
|
README |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 5 KB |
|
|
|
README.mingw |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 392 bytes |
|
|
|
README.vms |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 139 bytes |
|
|
|
README.woe32 |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 2.8 KB |
|
|
|
THANKS |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 6.9 KB |
|
|
|
version.sh |
1.1.1 | 20 years ago | Bazaar Package Importer | Import upstream version 0.14.1 | 115 bytes |
|
|