Package: ncurses-base
Version: 5.6+20080614-1
Severity: normal

Today it was discovered that a bug in debsums results in terminfo files
being left installed world writable and executable. Although the cause
of that is clearly not in ncurses-base, the effect would have been
prevented if ncurses-base would have included an md5sums in the package.

Suggestion is to fix this contributing factor to this issue.

Something else that could have prevented it is using relative symlinks
instead of absolute ones, but given that they are under different dirs
at the highest level, that is not an obvious change to make.

See for background:
- http://lists.debian.org/debian-devel/2008/06/msg00543.html
- http://bugs.debian.org/487317

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-rc6 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ncurses-base depends on:
ii  libncurses5               5.6+20080614-1 Shared libraries for terminal hand

ncurses-base recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to