[DebianGIS-dev] r1834 - packages/gpsdrive/branches/etch/debian

[nd-guest at alioth.debian.org]

Author: nd-guest
Date: 2008-12-27 15:33:32 +0000 (Sat, 27 Dec 2008)
New Revision: 1834

Modified:
   packages/gpsdrive/branches/etch/debian/changelog
   packages/gpsdrive/branches/etch/debian/rules
Log:
remove gpssmswatch, add changelog entries.


Modified: packages/gpsdrive/branches/etch/debian/changelog
===================================================================
--- packages/gpsdrive/branches/etch/debian/changelog	2008-12-27 15:31:12 UTC (rev 1833)
+++ packages/gpsdrive/branches/etch/debian/changelog	2008-12-27 15:33:32 UTC (rev 1834)
@@ -4,6 +4,9 @@
     attack (CVE-2008-5380). (Closes: #508595)
   * Remove /usr/bin/geo-nearest. Script no longer works with
     geocaching.com and uses insecure temporary files.
+  * Remove /usr/bin/gpssmwatch. Script is vulnerable to symlink attacks
+    and would require additional dependencies on gnokii and gpsd.
+  * Remove signalposreq() from src/splash.c to fix a symlink vulnerability.
 
  -- Andreas Putzo <andreas at putzo.net>  Fri, 26 Dec 2008 18:26:11 +0000
 

Modified: packages/gpsdrive/branches/etch/debian/rules
===================================================================
--- packages/gpsdrive/branches/etch/debian/rules	2008-12-27 15:31:12 UTC (rev 1833)
+++ packages/gpsdrive/branches/etch/debian/rules	2008-12-27 15:33:32 UTC (rev 1834)
@@ -53,7 +53,9 @@
 	# Remove gpsd, since debian has an own gpsd package
 	rm $(destdir)/bin/gpsd
 	# Remove geo-nearest (#508595)
-	rm $(destdir)/bin/geo-nearest
+	rm -f $(destdir)/bin/geo-nearest
+	# Remove gpssmswatch (#508597)
+	rm -f $(destdir)/bin/gpssmswatch
 	# add old manpages
 	#cp -r $(CURDIR)/debian/man/ $(destdir)/share/