tag 908237 - moreinfo
tag 908237 - unreproducible
clone 908237 -1 -2
severity -1 wishlist
tag -1 + wontfix
tag -1 - pending
severity -2 normal
tag -2 - pending
retitle -2 should not search for data files in .
severity 908237 grave
forwarded 908237 https://github.com/Numbertext/libnumbertext/pull/36
thanks

Hi,

On Fri, Sep 07, 2018 at 05:47:54PM +0100, Stephane Chazelas wrote:
> $ dpkg -L libnumbertext-tools
> [...]
> /usr/lib/libnumbertext/spellout
> 
> The tool is meant to be invoked by the end user, but is not
> located in a directory in $PATH. I would expect it to go in
> /usr/bin (and have a corresponding man page in
> /usr/share/man/man1).

Let's handle this in an other bug.

> It looks first in "en.sor" in the current directory, which is a
> security vulnerability (for instance when run in /tmp where some
> attacker could have planted a malicious "en.sor" file).

Let's handle this in an other bug.

> And then in "/usr/share/numbertext" while "libnumbertext-data"
> installs those files in "/usr/share/libnumbertext" instead.

Fixed in git. (This bug :))

Next time, please use the principle to report one bug in one bug, not
multiple things in one bug...

Regards,

Rene

Reply via email to