Bug#496359: The possibility of attack with the help of symlinks in some Debian packages

2008-08-26 Thread Moritz Muehlenhoff
tags 496359 confirmed patch thanks Dmitry E. Oboukhov wrote: > Package: citadel-server > Severity: grave > > Hi, maintainer! > > In some packages I've discovered scripts with errors which may be used > by a user for damaging important system files or user's files. This can indeed be used for sy

Bug#496359: The possibility of attack with the help of symlinks in some Debian packages

2008-08-24 Thread Dmitry E. Oboukhov
Package: citadel-server Severity: grave Hi, maintainer! This message about the error concerns a few packages at once. I've tested all the packages (for Lenny) on my Debian mirror. All scripts of packages (marked as executable) were tested. In some packages I've discovered scripts with erro