Ubuntu
nvi package

Please sync nvi 1.81.6-4 (universe) from Debian unstable (main).

Bug #262363 reported by Michael Bienia
4
Affects Status Importance Assigned to Milestone
nvi (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Binary package hint: nvi

Please sync nvi 1.81.6-4 (universe) from Debian unstable (main).

Changelog since current intrepid version 1.81.6-3:

nvi (1.81.6-4) unstable; urgency=high

  * Safeguard the creation of /var/tmp/vi.recover in the postinst
    against symlink attacks. Thanks Raphael Geissert for spotting
    this. RC security bug, urgency bumped. Closes: #496462.

 -- Jan Christoph Nordholz <email address hidden> Mon, 25 Aug 2008 19:43:31 +0200

Michael Bienia (geser)
Changed in nvi:
importance: Undecided → Wishlist
status: New → Confirmed
Revision history for this message
Sebastien Bacher (seb128) wrote :

[Updating] nvi (1.81.6-3 [Ubuntu] < 1.81.6-4 [Debian])
 * Trying to add nvi...
  - <nvi_1.81.6-4.dsc: downloading from http://ftp.debian.org/debian/>
  - <nvi_1.81.6.orig.tar.gz: already in distro - downloading from librarian>
  - <nvi_1.81.6-4.diff.gz: downloading from http://ftp.debian.org/debian/>
I: nvi [universe] -> nvi_1.81.6-3 [universe].
I: nvi [universe] -> nvi-doc_1.81.6-3 [universe].

Changed in nvi:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.