Le ofrecemos un trabajo sencillo y bien pagado.

2008-09-10 Thread Anna Portman

Estimado(a) senor(a),
Nuestra compania financiera de renta "Clayton Investments Inc" fundada en octubre de 1990 en New York presta hoy los servicios de broker y deposito, presenta la consultaria financiera y auditoria. Actualmente la compania goza de una reputacion irreprochable, tiene los recursos corporativos considerables, el imagen atrayente, el coeficiente alto de la actividad de negocios. La caracterizan como estable en el mercado de los servicios de negocios. 
Nuestra compania colabora con muchos paises dominantes lo que implica la aumentacion de la cantidad de personal exterior. Me llamo Anna Portman y soy jefa del departamento de personal. Nos da placer proponerle a Ud. la vacancia del agente financiero internacional dentro del area nacional de Espana. Las obligaciones de este agente consisten en tratar las remesas de dinero. Cada operacion bancaria sera remunerada con 250-1000 euros. El horario de trabajo es flexible (2-3 horas al dia, 2-4 veces a la semana), lo que le permite continuar su actividad actual. 

Exigencias principales: 
- poseer el ordenador, Internet, e-mail, telefono de contacto;
- poseer la cuenta bancaria en Espana. 
La educacion superior no es obligatoria. 


Los oficios de su cargo le voy a dar yo mismo. Entonces, esperamos que Usted 
tome la decision.

Ud. puede recibir la informacion mas detallada escribiendo al correo [EMAIL PROTECTED] 
Le agradecimos a Ud. por la atencion a nuestra proposicion, 
Anna Portman, Departamento de personal.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#497743: patch review

2008-09-10 Thread Xavier Lüthi
Hi Seb,

Perhaps I'm wrong, but to my knowledge and following the man page of
File::Temp, the function to use in order to create a temporary folder is
"tempdir" and not "mktempdir" (line 65 in your debdiff file).

Cheers,

Xavier


2008/9/6 Sebastien Delafond <[EMAIL PROTECTED]>

> On Fri, Sep 05, 2008 at 04:56:27PM +0200, Xavier Lüthi wrote:
> > I cannot find your patch attached to your email.  Can you please
> > send it as I want might be interested in reviewing it!
>
> There it is...
>
> --Cheers,
>
> --Seb
>


[4]: Арбитраж. Опытные адвокаты. Первый суд бесплатно

2008-09-10 Thread Давискиба
Уникальные методы победы в арбитражном суде любой инстанции.

Срок подготовки и подачи иска в арбитраж - 4 дня!

Мы действительно профессионалы!   

8 [495] 77l-l9-79 (08.30-22.OО)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#497743: patch review

2008-09-10 Thread Sebastien Delafond
On Wed, Sep 10, 2008 at 10:49:39AM +0200, Xavier Lüthi wrote:
> Perhaps I'm wrong, but to my knowledge and following the man page of
> File::Temp, the function to use in order to create a temporary
> folder is "tempdir" and not "mktempdir" (line 65 in your debdiff
> file).

you're entirely right; somehow all my attempts at doing Perl seem
bound to utter failure :)

Attached is the new diff.

Cheers,

--Seb
Only in .: amlabel-cdrw.8
Only in ./debian: cdrw-taper
Only in ./debian: cdrw-taper.debhelper.log
Only in ./debian: cdrw-taper.substvars
diff -u -r ../cdrw-taper-0.4.bak/debian/changelog ./debian/changelog
--- ../cdrw-taper-0.4.bak/debian/changelog  2008-09-03 15:50:40.0 
-0700
+++ ./debian/changelog  2008-09-04 09:46:39.0 -0700
@@ -1,3 +1,12 @@
+cdrw-taper (0.4-2.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Use File:Temp to generate a temporary file (Closes: #496380).
+  * Use either . or /usr/share/cdrw-taper to find taperlib.pm
+(Closes: #497743).
+
+ -- Sebastien Delafond <[EMAIL PROTECTED]>  Wed, 03 Sep 2008 16:32:21 -0700
+
 cdrw-taper (0.4-2) unstable; urgency=low
 
   * QA upload.
Only in ./debian: changelog~
diff -u -r ../cdrw-taper-0.4.bak/debian/control ./debian/control
--- ../cdrw-taper-0.4.bak/debian/control2008-09-03 15:50:40.0 
-0700
+++ ./debian/control2008-09-03 16:26:25.0 -0700
@@ -8,7 +8,7 @@
 
 Package: cdrw-taper
 Architecture: all
-Depends: amanda-server (>= 1:2.4.4p1-1), perl-base (>= 5.6.0-16), mkisofs (>= 
2.0), cdrecord (>= 2.0)
+Depends: amanda-server (>= 1:2.4.4p1-1), perl-base (>= 5.6.0-16), mkisofs (>= 
2.0), cdrecord (>= 2.0), libfile-temp-perl
 Suggests: dvd+rw-tools (>= 5.5.4.3.4)
 Description: taper replacement for amanda to support backups to CD-RW or DVD+RW
  The Amanda CDRW-Taper is a drop-in replacement for the taper component of the
Only in ./debian: files
Only in ./doc: changelog
Only in ../cdrw-taper-0.4.bak/doc: CHANGES
diff -u -r ../cdrw-taper-0.4.bak/src/amlabel-cdrw ./src/amlabel-cdrw
--- ../cdrw-taper-0.4.bak/src/amlabel-cdrw  2008-09-03 15:50:40.0 
-0700
+++ ./src/amlabel-cdrw  2008-09-10 09:08:21.0 -0700
@@ -8,11 +8,13 @@
 # intended for use with cdrw-taper
 
 use strict;
+use File::Temp qw/tempdir/;
 
 # Path to taperlib.pm
-push @INC, "/usr/lib/amanda";
-
-require "taperlib.pm";
+my $dir = $0;
+$dir =~ s/[^\/]*$//;
+push @INC, $dir;
+require "/usr/share/cdrw-taper/taperlib.pm";
 
 ##
 ## No user editable settings below here
@@ -69,16 +71,17 @@
 error("Won't label non-erasable media!");
 }
 
-# Write the label file to a temporary directory
-mkdir("/tmp/amlabel-cdrw.$$", 0755) || error("Cannot make directory 
/tmp/amlabelcd.$$: $!");
-open LABEL, ">/tmp/amlabel-cdrw.$$/AMANDA_LABEL" or error("Cannot create 
label: $!");
+# Write the label file to a temporary file
+my $tmpDir = tempdir("amlabel-cdrw-", CLEANUP => 1);
+my $amandaLabel = "$tmpDir/AMANDA_LABEL";
+open LABEL, ">$amandaLabel" or error("Cannot create label: $!");
 print LABEL "$NEW_LABEL\n";
 close LABEL;
 
 if ($mediaInfo->getType() eq "CDRW") {
 # Exit silently on errors. mkisofs/cdrecord already generate
 # appropriate messages
-my $result = system("$taper->{MKISOFS} -J -R -pad -quiet 
/tmp/amlabel-cdrw.$$ | $taper->{CDRECORD} dev=$writeDev -data blank=fast -");
+my $result = system("$taper->{MKISOFS} -J -R -pad -quiet '$amandaLabel' | 
$taper->{CDRECORD} dev=$writeDev -data blank=fast -");
 error("Error writing CD-RW") if ($result / 256 != 0);
 } else { # DVD
 my $result;
@@ -88,20 +91,12 @@
error("Error formatting ".$mediaInfo->getType());
 }
 }
-$result = system("$taper->{GROWISOFS} -Z $mountDev -J -R -pad -quiet 
/tmp/amlabel-cdrw.$$");
+$result = system("$taper->{GROWISOFS} -Z $mountDev -J -R -pad -quiet 
'$amandaLabel'");
 if ($result / 256 != 0) {
error("Error writing ".$mediaInfo->getType());
 }
 }
 
-# Clean up temporary files
-if (-e "/tmp/amlabel-cdrw.$$/AMANDA_LABEL") {
-unlink "/tmp/amlabel-cdrw.$$/AMANDA_LABEL";
-}
-if (-d "/tmp/amlabel-cdrw.$$") {
-rmdir "/tmp/amlabel-cdrw.$$";
-}
-
 if ($WRITE_TAPELIST) {
 # Finally, append the new entry to the media list
 open(ML, ">>$taper->{AMANDA_CONF}->{tapelist}")
@@ -114,9 +109,6 @@
 
 # print an error message and exit
 sub error {
-  # Clean up temporary files
-  unlink "/tmp/amlabel-cdrw.$$/AMANDA_LABEL" if -e 
"/tmp/amlabel-cdrw.$$/AMANDA_LABEL";
-  rmdir "/tmp/amlabel-cdrw.$$" if -d "/tmp/amlabel-cdrw.$$";
   print STDERR "amlabel-cdrw: $_[0]\n" if $_[0];
   exit 1;
 }
Only in ./src: amlabel-cdrw~


Bug#138298: Parattroopers Mistakenly Land at Prisonn

2008-09-10 Thread Knackstedt Girand

 
   


Eyes almost projecting out of his head, the impenetrable
to her he had called her all the pet names in the bundle
and examining it. Ye'n sweltered yoursen, are a serious
danger to any one given to walking sat down, drew out the
manuscript of the play.  

Processing of cdrw-taper_0.4-2.1_i386.changes

2008-09-10 Thread Archive Administrator
cdrw-taper_0.4-2.1_i386.changes uploaded successfully to localhost
along with the files:
  cdrw-taper_0.4-2.1.dsc
  cdrw-taper_0.4-2.1.diff.gz
  cdrw-taper_0.4-2.1_all.deb

Greetings,

Your Debian queue daemon


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



cdrw-taper_0.4-2.1_i386.changes ACCEPTED

2008-09-10 Thread Debian Installer

Accepted:
cdrw-taper_0.4-2.1.diff.gz
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1.diff.gz
cdrw-taper_0.4-2.1.dsc
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1.dsc
cdrw-taper_0.4-2.1_all.deb
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1_all.deb


Override entries for your package:
cdrw-taper_0.4-2.1.dsc - source utils
cdrw-taper_0.4-2.1_all.deb - optional utils

Announcing to [EMAIL PROTECTED]
Closing bugs: 496380 497743 


Thank you for your contribution to Debian.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#496380: patch review

2008-09-10 Thread Sebastien Delafond
cdrw-taper depends on the obsoleted mkisofs and cdrecrod, and that
constitutes a lintian error, preventing my from NMUing it.

I changed it to use genisoimage and wodim instead.

Cheers,

--Seb

On Wed, Sep 10, 2008 at 09:10:27AM -0700, Sebastien Delafond wrote:
> On Wed, Sep 10, 2008 at 10:49:39AM +0200, Xavier Lüthi wrote:
> > Perhaps I'm wrong, but to my knowledge and following the man page of
> > File::Temp, the function to use in order to create a temporary
> > folder is "tempdir" and not "mktempdir" (line 65 in your debdiff
> > file).
> 
> you're entirely right; somehow all my attempts at doing Perl seem
> bound to utter failure :)
> 
> Attached is the new diff.
> 
> Cheers,
> 
> --Seb

> Only in .: amlabel-cdrw.8
> Only in ./debian: cdrw-taper
> Only in ./debian: cdrw-taper.debhelper.log
> Only in ./debian: cdrw-taper.substvars
> diff -u -r ../cdrw-taper-0.4.bak/debian/changelog ./debian/changelog
> --- ../cdrw-taper-0.4.bak/debian/changelog2008-09-03 15:50:40.0 
> -0700
> +++ ./debian/changelog2008-09-04 09:46:39.0 -0700
> @@ -1,3 +1,12 @@
> +cdrw-taper (0.4-2.1) unstable; urgency=low
> +
> +  * Non-maintainer upload.
> +  * Use File:Temp to generate a temporary file (Closes: #496380).
> +  * Use either . or /usr/share/cdrw-taper to find taperlib.pm
> +(Closes: #497743).
> +
> + -- Sebastien Delafond <[EMAIL PROTECTED]>  Wed, 03 Sep 2008 16:32:21 -0700
> +
>  cdrw-taper (0.4-2) unstable; urgency=low
>  
>* QA upload.
> Only in ./debian: changelog~
> diff -u -r ../cdrw-taper-0.4.bak/debian/control ./debian/control
> --- ../cdrw-taper-0.4.bak/debian/control  2008-09-03 15:50:40.0 
> -0700
> +++ ./debian/control  2008-09-03 16:26:25.0 -0700
> @@ -8,7 +8,7 @@
>  
>  Package: cdrw-taper
>  Architecture: all
> -Depends: amanda-server (>= 1:2.4.4p1-1), perl-base (>= 5.6.0-16), mkisofs 
> (>= 2.0), cdrecord (>= 2.0)
> +Depends: amanda-server (>= 1:2.4.4p1-1), perl-base (>= 5.6.0-16), mkisofs 
> (>= 2.0), cdrecord (>= 2.0), libfile-temp-perl
>  Suggests: dvd+rw-tools (>= 5.5.4.3.4)
>  Description: taper replacement for amanda to support backups to CD-RW or 
> DVD+RW
>   The Amanda CDRW-Taper is a drop-in replacement for the taper component of 
> the
> Only in ./debian: files
> Only in ./doc: changelog
> Only in ../cdrw-taper-0.4.bak/doc: CHANGES
> diff -u -r ../cdrw-taper-0.4.bak/src/amlabel-cdrw ./src/amlabel-cdrw
> --- ../cdrw-taper-0.4.bak/src/amlabel-cdrw2008-09-03 15:50:40.0 
> -0700
> +++ ./src/amlabel-cdrw2008-09-10 09:08:21.0 -0700
> @@ -8,11 +8,13 @@
>  # intended for use with cdrw-taper
>  
>  use strict;
> +use File::Temp qw/tempdir/;
>  
>  # Path to taperlib.pm
> -push @INC, "/usr/lib/amanda";
> -
> -require "taperlib.pm";
> +my $dir = $0;
> +$dir =~ s/[^\/]*$//;
> +push @INC, $dir;
> +require "/usr/share/cdrw-taper/taperlib.pm";
>  
>  ##
>  ## No user editable settings below here
> @@ -69,16 +71,17 @@
>  error("Won't label non-erasable media!");
>  }
>  
> -# Write the label file to a temporary directory
> -mkdir("/tmp/amlabel-cdrw.$$", 0755) || error("Cannot make directory 
> /tmp/amlabelcd.$$: $!");
> -open LABEL, ">/tmp/amlabel-cdrw.$$/AMANDA_LABEL" or error("Cannot create 
> label: $!");
> +# Write the label file to a temporary file
> +my $tmpDir = tempdir("amlabel-cdrw-", CLEANUP => 1);
> +my $amandaLabel = "$tmpDir/AMANDA_LABEL";
> +open LABEL, ">$amandaLabel" or error("Cannot create label: $!");
>  print LABEL "$NEW_LABEL\n";
>  close LABEL;
>  
>  if ($mediaInfo->getType() eq "CDRW") {
>  # Exit silently on errors. mkisofs/cdrecord already generate
>  # appropriate messages
> -my $result = system("$taper->{MKISOFS} -J -R -pad -quiet 
> /tmp/amlabel-cdrw.$$ | $taper->{CDRECORD} dev=$writeDev -data blank=fast -");
> +my $result = system("$taper->{MKISOFS} -J -R -pad -quiet '$amandaLabel' 
> | $taper->{CDRECORD} dev=$writeDev -data blank=fast -");
>  error("Error writing CD-RW") if ($result / 256 != 0);
>  } else { # DVD
>  my $result;
> @@ -88,20 +91,12 @@
>   error("Error formatting ".$mediaInfo->getType());
>  }
>  }
> -$result = system("$taper->{GROWISOFS} -Z $mountDev -J -R -pad -quiet 
> /tmp/amlabel-cdrw.$$");
> +$result = system("$taper->{GROWISOFS} -Z $mountDev -J -R -pad -quiet 
> '$amandaLabel'");
>  if ($result / 256 != 0) {
>   error("Error writing ".$mediaInfo->getType());
>  }
>  }
>  
> -# Clean up temporary files
> -if (-e "/tmp/amlabel-cdrw.$$/AMANDA_LABEL") {
> -unlink "/tmp/amlabel-cdrw.$$/AMANDA_LABEL";
> -}
> -if (-d "/tmp/amlabel-cdrw.$$") {
> -rmdir "/tmp/amlabel-cdrw.$$";
> -}
> -
>  if ($WRITE_TAPELIST) {
>  # Finally, append the new entry to the media list
>  open(ML, ">>$taper->{AMANDA_CONF}->{tapelist}")
> @@ -114,9 +109,6 @@
>  
>  # print an error message and exit
>  sub error {
> -  # Clean up temporary files
> -  unlink "/tmp/amlabel-cdrw.$$/AMANDA_LABEL" if -e 
> "/tmp/amlabel-

Bug#497743: marked as done (cdrw-taper: amlabel-cdrw can't locate taperlib.pm)

2008-09-10 Thread Debian Bug Tracking System

Your message dated Wed, 10 Sep 2008 18:17:11 +
with message-id <[EMAIL PROTECTED]>
and subject line Bug#497743: fixed in cdrw-taper 0.4-2.1
has caused the Debian Bug report #497743,
regarding cdrw-taper: amlabel-cdrw can't locate taperlib.pm
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
497743: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497743
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: cdrw-taper
Version: 0.4-2.1
Severity: normal

Trying to run amlabel-cdrw:

  ~ # amlabel-cdrw blah foo
  Can't locate taperlib.pm in @INC (@INC contains: /etc/perl 
/usr/local/lib/perl/5.10.0 /usr/local/share/perl/5.10.0 /usr/lib/perl5 
/usr/share/perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 
/usr/local/lib/site_perl . /usr/lib/amanda) at /usr/sbin/amlabel-cdrw line 15.

Cheers,

--Seb

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages cdrw-taper depends on:
ii  amanda-server1:2.5.2p1-4 Advanced Maryland Automatic Networ
ii  cdrecord 9:1.1.8-1   Dummy transition package for wodim
ii  libfile-temp-perl0.20-1  provides functions for generating 
ii  mkisofs  9:1.1.8-1   Dummy transition package for genis
ii  perl-base5.10.0-13   minimal Perl system
ii  perl-modules [libfile-temp-p 5.10.0-13   Core Perl modules

cdrw-taper recommends no packages.

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: cdrw-taper
Source-Version: 0.4-2.1

We believe that the bug you reported is fixed in the latest version of
cdrw-taper, which is due to be installed in the Debian FTP archive:

cdrw-taper_0.4-2.1.diff.gz
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1.diff.gz
cdrw-taper_0.4-2.1.dsc
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1.dsc
cdrw-taper_0.4-2.1_all.deb
  to pool/main/c/cdrw-taper/cdrw-taper_0.4-2.1_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastien Delafond <[EMAIL PROTECTED]> (supplier of updated cdrw-taper package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Wed, 10 Sep 2008 11:10:49 -0700
Source: cdrw-taper
Binary: cdrw-taper
Architecture: source all
Version: 0.4-2.1
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <[EMAIL PROTECTED]>
Changed-By: Sebastien Delafond <[EMAIL PROTECTED]>
Description: 
 cdrw-taper - taper replacement for amanda to support backups to CD-RW or DVD+R
Closes: 496380 497743
Changes: 
 cdrw-taper (0.4-2.1) unstable; urgency=low
 .
   * Non-maintainer upload.
   * Use File:Temp to generate a temporary file (Closes: #496380).
   * Use either . or /usr/share/cdrw-taper to find taperlib.pm
 (Closes: #497743).
   * Depend on genisoimage and wodim instead of the obsoleted mkisofs and
 cdrecord.
Checksums-Sha1: 
 0e44fb1916da8dfc9797af78b5c8ecbd9c9a19ea 1001 cdrw-taper_0.4-2.1.dsc
 789cd09c88fe71cd67cd5a05eec41256ddbd887b 7260 cdrw-taper_0.4-2.1.diff.gz
 6953e409dee9986ae4ca8b5b9bb9b25f23d6d3eb 26518 cdrw-taper_0.4-2.1_all.deb
Checksums-Sha256: 
 7c4fde210b39377cbb774eb8497ada64aa0371de2c0ce604f731e4a9c1b609da 1001 
cdrw-taper_0.4-2.1.dsc
 2e2f66281b72cb3305b69287eda8e06aee52f417d9b2e3af5ad343e79e7054a9 7260 
cdrw-taper_0.4-2.1.diff.gz
 164eeb407472523e8706481480494ca5208d59ce15557992f07002382420f24d 26518 
cdrw-taper_0.4-2.1_all.deb
Files: 
 4783e0fbccf98a0890887a157bf7f771 1001 utils optional cdrw-taper_0.4-2.1.dsc
 8b994cbd695435a583fdf69db1b3692c 7260 utils optional cdrw-taper_0.4-2.1.diff.gz
 8a5d2236a8239970415ab926324027a5 26518 utils optional 
cdrw-taper_0.4-2.1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIyA3RiZgNKcDdyD8RAj0pAJ0YWnU6C0SnfxVt61uact5DVMAlugCgqecY
FEgJpQMzuSVjEOphdpiSlNQ=
=f/eT
-END PGP SIGNATURE-


--- End Message ---


Bug#496380: marked as done (The possibility of attack with the help of symlinks in some Debian packages)

2008-09-10 Thread Debian Bug Tracking System

Your message dated Wed, 10 Sep 2008 18:17:11 +
with message-id <[EMAIL PROTECTED]>
and subject line Bug#496380: fixed in cdrw-taper 0.4-2.1
has caused the Debian Bug report #496380,
regarding The possibility of attack with the help of symlinks in some Debian 
packages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
496380: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496380
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: cdrw-taper
Severity: grave

Hi, maintainer!

This message about the error concerns a few packages  at  once.   I've
tested all the packages (for Lenny) on my Debian mirror.  All  scripts
of packages (marked as executable) were tested.

In some packages I've discovered scripts with errors which may be used
by a user for damaging important system files or user's files.

For example if a script uses in its work a temp file which is  created
in /tmp directory, then every user can create symlink  with  the  same
name in this directory in order to  destroy  or  rewrite  some  system
or user file.  Symlink attack may also  lead  not  only  to  the  data
desctruction but to denial of service as well.

Even if you create files or directories with help of function 'RANDOM'
or pid(), then your system is not protected. Attacker can create many
symlinks in order to destroy your data or create 'denial  of  service'
for your package scripts.

Even if you make rm(dir) for files/directories, then  your  system  is
not protected. Attacker can permanently create symlinks.

This list is created with the help of script.  This list is sorted  by
hand. Howewer in some cases mistake is possible.

Please, Be understanding to possible mistakes. :)

I set Severity into grave for this bug. The table of discovered
problems is below.

Discussion of this bug you can see in debian-devel@:
http://lists.debian.org/debian-devel/2008/08/msg00271.html

Binary-package: r-base-core-ra (1.1.1-1)
file: /usr/lib/Ra/lib/R/bin/javareconf
Binary-package: rccp (0.9-2)
file: /usr/lib/rccp/delqueueask
Binary-package: mafft (6.240-1)
file: /usr/bin/mafft-homologs
Binary-package: openoffice.org-common (1:2.4.1-6)
file: /usr/lib/openoffice/program/senddoc
Binary-package: crossfire-maps (1.11.0-1)
file: /usr/share/games/crossfire/maps/Info/combine.pl
Binary-package: sgml2x (1.0.0-11.1)
file: /usr/bin/rlatex
Binary-package: liguidsoap (0.3.6-4)
file: /var/lib/liguidsoap/liguidsoap.py
Binary-package: citadel-server (7.37-1)
file: /usr/lib/citadel-server/migrate_aliases.sh
Binary-package: ampache (3.4.1-1)
file: /usr/share/ampache/www/locale/base/gather-messages.sh
Binary-package: xen-utils-3.2-1 (3.2.1-2)
file: /usr/lib/xen-3.2-1/bin/qemu-dm.debug
Binary-package: dtc-common (0.29.6-1)
file: /usr/share/dtc/admin/accesslog.php
file: /usr/share/dtc/admin/sa-wrapper
Binary-package: honeyd-common (1.5c-3)
file: /usr/share/honeyd/scripts/test.sh
Binary-package: lustre-tests (1.6.5-1)
file: /usr/lib/lustre/tests/runiozone
Binary-package: linuxtrade (3.65-8+b4)
file: /usr/share/linuxtrade/bin/linuxtrade.bwkvol
file: /usr/share/linuxtrade/bin/linuxtrade.wn
file: /usr/share/linuxtrade/bin/moneyam.helper
Binary-package: freevo (1.8.1-0)
file: /usr/bin/freevo.real
Binary-package: fml (4.0.3.dfsg-2)
file: /usr/share/fml/libexec/mead.pl
Binary-package: rkhunter (1.3.2-3)
file: /usr/bin/rkhunter
Binary-package: openswan (1:2.4.12+dfsg-1.1)
file: /usr/lib/ipsec/livetest
Binary-package: linux-patch-openswan (1:2.4.12+dfsg-1.1)
file: /usr/src/kernel-patches/all/openswan/packaging/utils/maysnap
file: /usr/src/kernel-patches/all/openswan/packaging/utils/maytest
Binary-package: aptoncd (0.1-1.1)
file: /usr/share/aptoncd/xmlfile.py
Binary-package: cdcontrol (1.90-1.1)
file: /usr/lib/cdcontrol/writtercontrol
Binary-package: newsgate (1.6-23)
file: /usr/bin/mkmailpost
Binary-package: gpsdrive-scripts (2.10~pre4-3)
file: /usr/bin/geo-code
Binary-package: impose+ (0.2-11)
file: /usr/bin/impose
Binary-package: mgt (2.31-5)
file: /usr/games/mailgo
Binary-package: audiolink (0.05-1)
file: /usr/bin/audiolink
Binary-package: ibackup (2.27-4.1)
file: /usr/bin/ibackup
Binary-package: emacspeak (26.0-3)
file: /usr/share/emacs/site-lisp/emacspeak/etc/extract-table.pl
Binary-package: bk2site (1:1.1.9-3.1)
file: /usr/lib/cgi-bin/bk2site/redirect.pl
Binary-package: datafreedom-perl (0.1.7-1)
file: /usr/bin/dfxml-invoice
Binary-package: emacs-jabber (0.7.91-1)
file: /usr/lib/emacsen-common/packages/install/em