Re: Vulnerability in pcs or is it in more generic code?

2022-09-10 Thread Ola Lundqvist
Hi Paul Thank you for pointing out the reason why umask 0 is used. I think it is reasonable. I think it would be a good thing if the caller could tell the umask to use, or alternatively use different functions. But I let other people handle that. Your explanation shows that the vulnerability is i

Re: Upcoming oldstable point release (10.13)

2022-09-10 Thread Adam D. Barratt
On Sat, 2022-08-13 at 21:03 +0100, Adam D. Barratt wrote: > Hi, > > The next - and final - point release for "buster" (10.13) is > scheduled > for Saturday, September 10th. Processing of new uploads into buster- > proposed-updates will be frozen during the weekend of August 27th. > The archive

Re: Upcoming stable point release (11.5)

2022-09-10 Thread Adam D. Barratt
On Sat, 2022-08-13 at 21:00 +0100, Adam D. Barratt wrote: > Hi, > > The next point release for "bullseye" (11.5) is scheduled for > Saturday, > September 10th. Processing of new uploads into bullseye-proposed- > updates will be frozen during the preceding weekend. > The archive side of the poin