[Bug 608071] VUL-0: ghostscript: executes random code on startup (does not verify ownership of sensitive files used)

http://bugzilla.novell.com/show_bug.cgi?id=608071 http://bugzilla.novell.com/show_bug.cgi?id=608071#c43 --- Comment #43 from Ludwig Nussel <lnussel@novell.com> 2010-07-01 10:07:22 CEST --- Weird approach :-) That patch only fixes the very specific problem with /tmp. The patch still accepts any directory with permission 755. So if you view a file in e.g. an nfs exported directory from someone else gs would still read gs_init.ps from that users' directory. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.