tags 608979 - security severity 608979 minor thanks Hi, this is no security bug. As far as I can tell this is a NULL ptr dereference when create_local_config_file() returns NULL without checking if fopen failed when attempting to save a configuration file. There might be a similar case, that's what I've seen with a quick glance. As far as I can tell there is no buffer overflow in processing HOME even though the code looks really bad. So I'm downgrading this bug.
Cheers Nico -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org