comparison lib-src/ChangeLog @ 107762:2d36607da023

Fix permissions handling (CVE-2010-0825). * movemail.c (main): Check return values of setuid. Avoid possibility of symlink attack when movemail is setgid mail (CVE-2010-0825).
author Chong Yidong <cyd@stupidchicken.com>
date Fri, 02 Apr 2010 11:24:16 -0400
parents f46f743d330a
children 18e1800af997 10464087f606
comparison
equal deleted inserted replaced
107761:f54953a8f7e2 107762:2d36607da023
1 2010-04-02 Dan Rosenberg <dan.j.rosenberg@gmail.com> (tiny change)
2
3 * movemail.c (main): Check return values of setuid. Avoid
4 possibility of symlink attack when movemail is setgid mail
5 (CVE-2010-0825).
6
1 2010-03-19 Tetsurou Okazaki <okazaki@be.to> (tiny change) 7 2010-03-19 Tetsurou Okazaki <okazaki@be.to> (tiny change)
2 8
3 * Makefile.in (uninstall): Handle the case where archlibdir does 9 * Makefile.in (uninstall): Handle the case where archlibdir does
4 not exist. (Bug#5720) 10 not exist. (Bug#5720)
5 11