From f3e17ad76352fc4eb4199f612383458464ef11f2 Mon Sep 17 00:00:00 2001 From: William Kendrick Date: Sun, 23 Oct 2005 20:23:40 +0000 Subject: [PATCH] Documented tuxpaint-import security fix. --- docs/CHANGES.txt | 5 +++++ src/tuxpaint-import.sh | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/CHANGES.txt b/docs/CHANGES.txt index 86c0408ea..86e9dcfba 100644 --- a/docs/CHANGES.txt +++ b/docs/CHANGES.txt @@ -215,6 +215,11 @@ http://www.newbreedsoftware.com/tuxpaint/ * Bug fixes: ------------------- + * tuxpaint-import shell script created temporary files with predictable + names in "/tmp", leaving it open to symlink attacks. Now creating + temp. files in Tux Paint's default save directory. + Ben Armstrong + * Untranslated text in right-to-left languages (e.g., Hebrew) are no longer displayed backwards. diff --git a/src/tuxpaint-import.sh b/src/tuxpaint-import.sh index 2a81013a8..e3dd431cc 100755 --- a/src/tuxpaint-import.sh +++ b/src/tuxpaint-import.sh @@ -9,7 +9,7 @@ # bill@newbreedsoftware.com # http://www.newbreedsoftware.com/tuxpaint/ -# September 21, 2002 - February 26, 2005 +# September 21, 2002 - October 23, 2005 SAVEDIR=$HOME/.tuxpaint/saved