Package: emboss Version: 6.6.0+dfsg-8 Tags: patch, security Dear Maintainer, the emboss package has mailcap entries with quoted %-escapes. That is considered unsafe. Proper escaping should be left to the programs using the entry.
This Lintian tag is triggered: https://lintian.debian.org/tags/quoted-placeholder-in-mailcap-entry.html See also grave bug #930908, which was recently closed because "a Lintian test already exists": https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930908 I'm using the "security" tag because the affected rules in combination with certain mail user agents (or document openers) are the cause of a shell command injection vulnerability. If you need more information let me know. Thanks, MNZ
diff --git a/debian/emboss.mime b/debian/emboss.mime index 38db622..1a7017f 100644 --- a/debian/emboss.mime +++ b/debian/emboss.mime @@ -1,6 +1,6 @@ -application/vnd.appliedbiosystems.abif; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 -application/x-dna; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 -application/abi1; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 -application/vnd.appliedbiosystems.abif; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput -application/x-dna; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput -application/abi1; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput +application/vnd.appliedbiosystems.abif; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 +application/x-dna; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 +application/abi1; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 +application/vnd.appliedbiosystems.abif; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput +application/x-dna; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput +application/abi1; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
