Debian安全性建议DSA-008-1

/ns/ld/unix/data/20010303061655.htm

数据包: dialog
发布日期：2000-12-25
问题类型: 不安全的临时文件
只限于Debian: 非
据Matt Kraai报导他发现在dialog创建lock-files时有一个问题: 被创建的文件并不安全，它易受到symlink攻击.

这个问题在0.9a-20000118-3bis版本中已修复.

wget url 将为你取得所需文件
dpkg -i file.deb 将安装相关文件


Debian GNU/Linux 2.2 别名 potato

Potato 发布了 alpha, arm, i386, m68k, powerpc 及 sparc系统的文档.

源档案:
http://security.debian.org/dists/stable/updates/main/source/dialog_0.9a-20000118-3bis.diff.gz
MD5 校验和: 78b6e69859bc18f738982d4f1bd390c7
http://security.debian.org/dists/stable/updates/main/source/dialog_0.9a-20000118-3bis.dsc
MD5 校验和: 9bd63778ae6f295d9c06d22ac5910b92
http://security.debian.org/dists/stable/updates/main/source/dialog_0.9a-20000118.orig.tar.gz
MD5 校验和: ffa7381631cb24aa5d61dab7f2f1245b

Alpha 文档:
http://security.debian.org/dists/stable/updates/main/binary-alpha/dialog_0.9a-20000118-3bis_alpha.deb
MD5 校验和: 57c04e1f8dec33de5dffee92d0b162cb

ARM 文档:
http://security.debian.org/dists/stable/updates/main/binary-arm/dialog_0.9a-20000118-3bis_arm.deb
MD5 校验和: 5735033a17262209a1130459229a0982

Intel ia32 文档:
http://security.debian.org/dists/stable/updates/main/binary-i386/dialog_0.9a-20000118-3bis_i386.deb
MD5 校验和: f38bbfaa0076a590fe2421eb2ab68a9f

Motorola 680x0 文档:
http://security.debian.org/dists/stable/updates/main/binary-m68k/dialog_0.9a-20000118-3bis_m68k.deb
MD5 校验和: e7d0985d05a750c6550dd778ab14863e

PowerPC 文档:
http://security.debian.org/dists/stable/updates/main/binary-powerpc/dialog_0.9a-20000118-3bis_powerpc.deb
MD5 校验和: 13033d33c56d4e18e8442cc2debaa6f8

Sun Sparc 文档:
http://security.debian.org/dists/stable/updates/main/binary-sparc/dialog_0.9a-20000118-3bis_sparc.deb
MD5 校验和: c310130da0b7ba8ad8d52003db9669c3

这些文件很快将转移到 ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/

对于未发布的文档请参看下列站点的相关目录 ftp://ftp.debian.org/debian/dists/sid/binary-$arch/