Bug#445308: Multiple symlink vulnerabilities

2007-10-06 Thread Josef Sipek
On Sat, Oct 06, 2007 at 06:27:01PM +0200, Nico Golde wrote: > Hi, > * Brandon Philips <[EMAIL PROTECTED]> [2007-10-06 18:18]: > > On 11:47 Sat 06 Oct 2007, Josef Sipek wrote: > > > On Sat, Oct 06, 2007 at 12:56:20PM +0200, Nico Golde wrote: > > > > Hi, > &

Bug#445308: Multiple symlink vulnerabilities

2007-10-06 Thread Josef Sipek
On Sat, Oct 06, 2007 at 09:13:06AM -0700, Brandon Philips wrote: > On 11:47 Sat 06 Oct 2007, Josef Sipek wrote: > > On Sat, Oct 06, 2007 at 12:56:20PM +0200, Nico Golde wrote: > > > Hi, > > > I intend to NMU this bug. > > > The attached patch fixes this issu

Bug#445308: Multiple symlink vulnerabilities

2007-10-06 Thread Josef Sipek
On Sat, Oct 06, 2007 at 12:56:20PM +0200, Nico Golde wrote: > Hi, > I intend to NMU this bug. > The attached patch fixes this issue. > It will be also archived on: > http://people.debian.org/~nion/nmu-diff/guilt_0.27-1_0.27-1.1.patch This patch breaks Guilt in several ways, I am in the process of