medibuntu-maintainers team mailing list archive

[molostoff <748990@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

# uname -a
Linux carbon 2.6.35-28-generic-pae #49-Ubuntu SMP Tue Mar 1 14:58:06 UTC 2011 i686 GNU/Linux

Yestoday I have found at rootfs  / :

lrwxrwxrwx   1 root root     6 2011-03-30 16:13 3.5.qtx -> /Delta
lrwxrwxrwx   1 root root    20 2011-03-30 16:13 Delta -> /usr/lib/codecs/3ivx

# dpkg -S 3ivx
w32codecs: /usr/lib/codecs/3ivx Delta 3.5.qtx 
## (a file name with whitespaces I suppose was laminated over rootfs with nonexistent links, perhaps there is a misuse of whitespaces in install/update script?)

also:

dpkg.log.1:2011-03-30 16:13:15 upgrade w32codecs 1:20110131-0.1medibuntu1 1:20110131-0.1medibuntu2
dpkg.log.1:2011-03-30 16:13:15 status half-configured w32codecs 1:20110131-0.1medibuntu1
dpkg.log.1:2011-03-30 16:13:15 status unpacked w32codecs 1:20110131-0.1medibuntu1
dpkg.log.1:2011-03-30 16:13:15 status half-installed w32codecs 1:20110131-0.1medibuntu1
dpkg.log.1:2011-03-30 16:13:28 status half-installed w32codecs 1:20110131-0.1medibuntu1
dpkg.log.1:2011-03-30 16:13:28 status unpacked w32codecs 1:20110131-0.1medibuntu2
dpkg.log.1:2011-03-30 16:13:28 status unpacked w32codecs 1:20110131-0.1medibuntu2

** Affects: medibuntu
     Importance: Undecided
         Status: New


** Tags: codecs rootfs w32codecs

-- 
You received this bug notification because you are a member of Medibuntu
Packaging Team, which is a direct subscriber.
https://bugs.launchpad.net/bugs/748990

Title:
  unrecognized /Delta file after update w32codecs
  1:20110131-0.1medibuntu2