deb vfs security issue (CAN-2004-0494)

Roland Illig roland.illig at gmx.de
Wed Aug 18 18:54:29 UTC 2004


Leonard den Ottolander wrote:
> Hi,
> 
> On Wed, 2004-08-18 at 16:31, Leonard den Ottolander wrote:
> 
>>I noticed this in Red Hat's bugzilla just now:
>>http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127973 .
> 
> Could somebody on a system with dpkg installed verify that things still
> work correctly after applying this patch? Thanks.

I successfully opened a .deb package with the patched midnight 
commander. It works fine.

My approach to this problem has been to write a safe_system(...) 
subroutine for Perl that is not as complicated as IPC::Open3. ;)

Roland



More information about the mc-devel mailing list