From: [email protected]

tag 264977 security woody confirmed
severity 264977 serious
thanks

On mer, 2004-08-11 at 10:26 +0200, Sigmund Straumsnes wrote:

Package: libpng2-dev
Version: 1.0.12-3.woody.7
Severity: minor

# ls -ldn /usr/share/doc/libpng2/libpng.txt.gz
-rw-r--r-- 1 620 96 37454 Jun 8 2001 /usr/share/doc/libpng2/libpng.txt.gz

It probably should be owned by user root, group root?
We run checks for legal owners/groups, so I got an error after the latest upgrade.

I can confirm there is an issue with the security update:

dpkg --contents libpng2-dev_1.0.12-3.woody.7_i386.deb

drwxr-xr-x root/root 0 2004-08-04 05:34:03 ./
[snip]
drwxr-xr-x root/root 0 2004-08-04 05:34:03 ./usr/share/doc/libpng2/ -rw-r--r-- / 37454 2001-06-08 21:21:24 ./usr/share/doc/libpng2/libpng.txt.gz

Notice the absence of owner and group. Oddly, dpkg, extracts that as 620/96: -rw-r--r-- 1 620 96 37K 2001-06-08 21:21 libpng.txt.gz

Can anyone take care of this?

Regards,
--
.''`. Josselin Mouette /\./\
: :' : [email protected]
`. `' [email protected]
`- Debian GNU/Linux -- The power of freedom

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBBIQEQrSla4ddfhTMRApKAAJ4iV5NivYopoA6B/Da0Hbp1VZvEiwCgrSEQ gXubRW1W81GRoAx0Oqy9aoU=
=KPs9
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)

From: [email protected]

severity 264977 minor
thanks

Josselin Mouette wrote:

tag 264977 security woody confirmed
severity 264977 serious
thanks

On mer, 2004-08-11 at 10:26 +0200, Sigmund Straumsnes wrote:

Package: libpng2-dev
Version: 1.0.12-3.woody.7
Severity: minor

# ls -ldn /usr/share/doc/libpng2/libpng.txt.gz
-rw-r--r-- 1 620 96 37454 Jun 8 2001 /usr/share/doc/libpng2/libpng.txt.gz

It probably should be owned by user root, group root?
We run checks for legal owners/groups, so I got an error after the latest upgrade.

I can confirm there is an issue with the security update:

dpkg --contents libpng2-dev_1.0.12-3.woody.7_i386.deb

drwxr-xr-x root/root 0 2004-08-04 05:34:03 ./
[snip]
drwxr-xr-x root/root 0 2004-08-04 05:34:03 ./usr/share/doc/libpng2/ -rw-r--r-- / 37454 2001-06-08 21:21:24 ./usr/share/doc/libpng2/libpng.txt.gz

Notice the absence of owner and group. Oddly, dpkg, extracts that as 620/96: -rw-r--r-- 1 620 96 37K 2001-06-08 21:21 libpng.txt.gz

Can anyone take care of this?

What's serious in the fact that a compressed text file is not owned by root
but by a non-existing user?

Regards,

Joey

--
The only stupid question is the unasked one.

Please always Cc to me when replying to me on the lists.


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)

From: [email protected]

On lun, 2004-08-16 at 20:59 +0200, Martin Schulze wrote:

Notice the absence of owner and group. Oddly, dpkg, extracts that as 620/96:
-rw-r--r-- 1 620 96 37K 2001-06-08 21:21 libpng.txt.gz

Can anyone take care of this?

What's serious in the fact that a compressed text file is not owned by root but by a non-existing user?

Sorry, I overlooked this.
--
.''`. Josselin Mouette /\./\
: :' : [email protected]
`. `' [email protected]
`- Debian GNU/Linux -- The power of freedom

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBBIQqqrSla4ddfhTMRAg6aAKCyu1jfe+aSzAA9UIWX5Jznn8VGagCeLVz7 YjlCzi0Mtd7ijDeWoaqceho=
=Ta6m
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)