Bug#726093: python-scipy: CVE-2013-4251: weave /tmp and current directory issues

2014-11-29 Thread Moritz Mühlenhoff
On Wed, Oct 23, 2013 at 08:04:17AM +0200, Salvatore Bonaccorso wrote: > Hi Julian, > > On Wed, Oct 23, 2013 at 01:16:36AM +0200, Julian Taylor wrote: > > On 22.10.2013 08:43, Salvatore Bonaccorso wrote: > > > Hi Julian, > > > > > > Cc'ing Julian directly as per short discussion on IRC. > > > > >

Bug#726093: python-scipy: CVE-2013-4251: weave /tmp and current directory issues

2013-10-22 Thread Salvatore Bonaccorso
Hi Julian, On Wed, Oct 23, 2013 at 01:16:36AM +0200, Julian Taylor wrote: > On 22.10.2013 08:43, Salvatore Bonaccorso wrote: > > Hi Julian, > > > > Cc'ing Julian directly as per short discussion on IRC. > > > > On IRC you mentioned that you are looking at this issue. Did you had a > > chance to

Bug#726093: python-scipy: CVE-2013-4251: weave /tmp and current directory issues

2013-10-22 Thread Julian Taylor
On 22.10.2013 08:43, Salvatore Bonaccorso wrote: > Hi Julian, > > Cc'ing Julian directly as per short discussion on IRC. > > On IRC you mentioned that you are looking at this issue. Did you had a > chance to prepare the upload for unstable? > I have prepared updates for unstable, wheezy and squ

Bug#726093: python-scipy: CVE-2013-4251: weave /tmp and current directory issues

2013-10-21 Thread Salvatore Bonaccorso
Hi Julian, Cc'ing Julian directly as per short discussion on IRC. On IRC you mentioned that you are looking at this issue. Did you had a chance to prepare the upload for unstable? I can otherwise try to prepare a NMU with the given patch only, if needed. p.s.: Note it was decided to tag this as

Processed: Re: Bug#726093: python-scipy: CVE-2013-4251: weave /tmp and current directory issues

2013-10-12 Thread Debian Bug Tracking System
Processing control commands: > severity -1 grave Bug #726093 [python-scipy] python-scipy: CVE-2013-4251: weave /tmp and current directory issues Severity set to 'grave' from 'important' -- 726093: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726093 Debian Bug Tracking System Contact ow...@b