lp:debian/publicfile-installer

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3. By Joost van Baal on 2015-09-06

* New upstream. No longer ships install-publicfile, no longer uses /tmp.
  This fixes a serious security issue: a local privilage escalation
  security hole due to insecure use of /tmp. "This [...] package downloads
  the source code for DJB's publicfile, builds it, and then puts the
  output in a predictable location in a world-writable directory, using an
  existing directory of that name if it already exists, then (either
  automatically or by telling the admin to run another script) installs
  whatever happens to be in that directory. This can be exploited by
  malicious local users to get arbitrary installscripts executed as root."
  Thanks Justin B Rye. Closes: #795062.
  + debian/templates: adjusted.
  + debian/control: Depends: add sudo.
* debian/changelog: fix spelling error.

2. By Joost van Baal on 2015-02-04

* New upstream, targetting publicfile (0.52-7).
* Upload to Debian archive. Closes: #122614.
* debian/copyright: add one missing copyright statement, add "Source",
  update license on most files from GPL-2 to GPL-3.
* debian/control: enhance description.

1. By Joost van Baal on 2015-02-04

Import upstream version 0.10