Package: x11-common
Version: 1:7.7+7
Followup-For: Bug #677831
Hi,
Apparently the calls to the do_restorecon() function have been dropped
in the following commit:
commit 0418b8dd8fa6940285f7f6b71302655942c15fb7
Author: Julien Cristau <jcris...@debian.org>
Date: Fri Mar 2 21:57:56 2012 +0100
Be more careful before running chown/chmod in x11-common.init
Fix unsafe manipulation of /tmp/.X11-unix and /tmp/.ICE-unix in the
x11-common
init script. A malicious user could trick us into changing
ownership/permissions of an arbitrary directory, and elevate their
privileges
(closes: #661627). Reference: CVE-2012-1093.
I guess it was not intentional,
Cheers,
Laurent Bigonville
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages x11-common depends on:
ii debconf [debconf-2.0] 1.5.53
ii lsb-base 4.1+Debian13
x11-common recommends no packages.
x11-common suggests no packages.
-- debconf information:
x11-common/xwrapper/actual_allowed_users: console
x11-common/xwrapper/allowed_users: Console Users Only
--
To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive:
https://lists.debian.org/20140827225404.9672.24179.report...@fornost.bigon.be
