comix 3.6.4-1.1 source package in Debian

Changelog

comix (3.6.4-1.1) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * Apply patch by Mamoru Tasaka to fix arbitrary code execution
    via crafted file names because of passing the filename directly
    to string concatenation used in os.popen (CVE-2008-1568; Closes: #462840).
  * Apply patch by Mamoru Tasaka to use empfile.mkdtemp() to enable comix
    for multi-user environments and thus prevent a race condition in /tmp
    without a real security impact (Closes: #462836).

 -- Nico Golde <email address hidden>  Thu, 03 Apr 2008 00:49:49 +0200