Control: tags -1 + confirmed On Fri, 2014-01-31 at 19:01 +0100, Niels Thykier wrote: > I would like to fix #736359 / CVE-2014-1638 in Wheezy and Squeeze[0]. > According to the security tracker, the security team has classified > the bug as "minor" and declared it does not need a DSA[1]. > > The problem is that localepurge would create tmp files in an unsafe > way. This allows a local user to have root destroy arbitrary files on the > system (via a race-condition) during upgrades and purge of localepurge.
Please go ahead; thanks. (Bearing in mind the impending window close for 7.4 this weekend.) Regards, Adam -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
