notfound 575921 3.3 thanks * Thomas Lange <la...@informatik.uni-koeln.de> [2010-03-31 21:47:08 CEST]: > >>>>> On Tue, 30 Mar 2010 21:36:05 +0200, Gerfried Fuchs <rho...@deb.at> said: > > > If they only affect FAI versions from 3.3 - shouldn't it be versioned > > like that? In case I missed something feel free to revert, but without a > > found version this looks like affecting even lenny. > > The last part of the bug report (writing to /tmp/dpkg-selections.tmp) > also affects the lenny version.
That wasn't too clear from the writing to me, sorry. Removed the found version again, I guess you plan to coordinate with the stable release team about an update, not sure wether a symlink attack (like, to critical root-writeonly files) would be possible there and a DSA should be roled out by the security team? Thanks for the update! Rhonda -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
