Bug#775306: pxz: race condition in setting permissions on output file

2015-01-26 Thread Holger Levsen
Hi Moritz, On Montag, 26. Januar 2015, Moritz Mühlenhoff wrote: > Patch attached, can you take care of an upload and unblock with > the release team? thanks for the patch, can do! cheers, Holger signature.asc Description: This is a digitally signed message part.

Bug#775306: pxz: race condition in setting permissions on output file

2015-01-26 Thread Moritz Mühlenhoff
On Wed, Jan 14, 2015 at 05:25:02AM +0100, Holger Levsen wrote: > control: severity -1 important > > Hi Alexander, > > On Dienstag, 13. Januar 2015, Alexander Cherepanov wrote: > > pxz sets the mode of an output file to be the same as the one of an > > input file but does it only after compression

Bug#775306: pxz: race condition in setting permissions on output file

2015-01-18 Thread Salvatore Bonaccorso
Control: retitle -1 pxz: CVE-2015-1200: race condition in setting permissions Hi This has been assigned CVE-2015-1200 by MITRE. Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.or

Bug#775306: pxz: race condition in setting permissions on output file

2015-01-13 Thread Holger Levsen
control: severity -1 important Hi Alexander, On Dienstag, 13. Januar 2015, Alexander Cherepanov wrote: > pxz sets the mode of an output file to be the same as the one of an > input file but does it only after compression is over. This leaves the > output file with the wrong mode during all the ti

Bug#775306: pxz: race condition in setting permissions on output file

2015-01-13 Thread Alexander Cherepanov
Package: pxz Version: 4.999.99~beta3+git659fc9b-2 Tags: security pxz sets the mode of an output file to be the same as the one of an input file but does it only after compression is over. This leaves the output file with the wrong mode during all the time of the compression process. Illustra