Package: dpkg
Version: 1.14.4
Severity: normal

Looks like there's some missing input sanitising in dpkg's command-line
processing:

% dpkg -l \* \*
Segmentation fault


I haven't looked in detail at what causes this. On one of my systems,
something like `dpkg -l cupsys \*` also segfaults, although it didn't on
this system. Running dpkg with two literal *'s causes segfaults on both
systems.

This probably should be fixed, in case there's an obscure security hole
somewhere in there. Note that this happens when running both as non-root
or as root.


T

-- 
Real Programmers use "cat > a.out".


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to