[Splashy-devel] Bug#405534: Bug#405534: evil symlink following

Luis Mondesi lemsx1 at gmail.com
Sat Jan 5 02:04:03 UTC 2008


Thanks for reporting this.

This pushes us to make the Debian package for 0.4.1 faster ;-)

The new version installs correctly on /usr/share/splashy/themes

On Jan 3, 2008 4:04 PM, Joey Hess <joeyh at debian.org> wrote:
> This bug is particularly nasty, because since /etc/splashy/themes is a
> symlink into /usr, and splashy-themes contains files under that
> directory, dpkg follows the symlink, and actually puts the files in
> /usr/share/splashy/themes.
>
> --
> see shy jo
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFHfU36d8HHehbQuO8RAgNUAKDdC87GU7FKrq6DkFsHrzxaa/olcwCfTr/l
> 8yPHtRQsYkAqWrUdgWtjobs=
> =LDDx
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Splashy-devel mailing list
> Splashy-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/splashy-devel
>



-- 
----)(-----
Luis Mondesi
Maestro Debiano

----- START ENCRYPTED BLOCK (Triple-ROT13) ------
Gur Hohagh [Yvahk] qvfgevohgvba oevatf gur fcvevg bs Hohagh gb gur
fbsgjner jbeyq.
----- END ENCRYPTED BLOCK (Triple-ROT13) ------





More information about the Splashy-devel mailing list