Martin Pitt wrote: > Package: webmin > Version: 1.180-3 > Severity: critical > Tags: security > > Hi! > > CAN-2005-1177 describes a bug in webmin that can cause the permissions > and ownerships of configuration files to be changed when the file is > modified. This is fixed in 1.200, see > > http://www.webmin.com/changes.html > > Can you please backport this fix?
According to this mailing list post, it only affects 1.190 and not the version in sarge. http://lists.debian.org/debian-release/2005/04/msg00185.html I think this bug should be closed. You may find the testing security team's CAN/list file useful, BTW, since nearly every bug you filed today already had a note in there about the same vulnerbility. -- see shy jo
signature.asc
Description: Digital signature
