Debian Bug report logs - #19712
FIXED in NMU [was: preinst and postinst use /tmp/*.$$]

Package: dpkg; Maintainer for dpkg is Dpkg Developers <debian-dpkg@lists.debian.org>; Source for dpkg is src:dpkg (PTS, buildd, popcon).

Reported by: James Troup <J.J.Troup@scm.brad.ac.uk>

Date: Sun, 15 Mar 1998 20:03:03 UTC

Severity: fixed

Done: Anthony Towns <ajt@master.debian.org>

Bug is archived. No further changes may be made.

Forwarded to ian@davenant.greenend.org.uk

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Klee Dienes and Ian Jackson <dpkg-maint@chiark.greenend.org.uk>:
Bug#19712; Package dpkg. (full text, mbox, link).


Acknowledgement sent to James Troup <J.J.Troup@scm.brad.ac.uk>:
New bug report received and forwarded. Copy sent to Klee Dienes and Ian Jackson <dpkg-maint@chiark.greenend.org.uk>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: James Troup <J.J.Troup@scm.brad.ac.uk>
To: submit@bugs.debian.org
Subject: dpkg: preinst and postinst use /tmp/*.$$
Date: 15 Mar 1998 19:49:42 +0000
Package: dpkg
Version: 1.4.0.21
Severity: grave

dpkg's preinst and postinst use /tmp/*.$$ which is a potential
security hole, please use $$ in non-world-writable directories or
tempfile or something.

-- 
James


Severity set to `normal'. Request was from James Troup <J.J.Troup@scm.brad.ac.uk> to control@bugs.debian.org. (full text, mbox, link).


Changed bug title. Request was from James Troup <james@nocrew.org> to control@bugs.debian.org. (full text, mbox, link).


Severity set to `fixed'. Request was from jdassen@wi.leidenuniv.nl to control@bugs.debian.org. (full text, mbox, link).


Severity set to `fixed'. Request was from Joel Klecker <jk@espy.org> to control@bugs.debian.org. (full text, mbox, link).


Noted your statement that bug has been forwarded to ian@davenant.greenend.org.uk. Request was from Ian Jackson <ian@davenant.greenend.org.uk> to control@bugs.debian.org. (full text, mbox, link).


Bug reassigned from package `dpkg' to `dpkg-iwj'. Request was from Wichert Akkerman <wichert@soil.nl> to control@bugs.debian.org. (full text, mbox, link).


Bug reassigned from package `dpkg-iwj' to `dpkg'. Request was from Anthony Towns <ajt@master.debian.org> to control@bugs.debian.org. (full text, mbox, link).


Bug closed, ack sent to submitter - they'd better know why ! Request was from Anthony Towns <ajt@master.debian.org> to control@bugs.debian.org. (full text, mbox, link).


Bug reassigned from package `dpkg' to `dpkg'. Request was from Anthony Towns <ajt@master.debian.org> to control@bugs.debian.org. (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Mar 28 23:29:52 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.