- Package:
- src:tuxpaint
- Source:
- tuxpaint
- Submitter:
- Helmut Grohne
- Date:
- 2021-02-12 08:06:04 UTC
- Severity:
- important
- Tags:
tuxpaint runs "HOME=/tmp kbuildsycoca5" during build. I'm not exactly sure what this does, but I see a number of issues with doing so: * kbuildsycoca5 reads /tmp/.config/QtProject/qtlogging.ini. I'm not sure whether that can be turned into a privilege escalation. * kbuildsycoca5 reads various locales from /tmp. Again I'm not sure whether malicious locales could be used to take over the process. * kbuildsycoca5 tries to create a directory /tmp/.cache. If that location is occupied with a regular file, the build fails (FTBFS). * kbuildsycoca5 reads /tmp/.config/kbuildsycoca5rc. This looks like plenty of surface and the chances that this code is fully covered against that scenario are dim. It seems very likely, that a privilege escalation is underneath. Using HOME=/tmp looks like a recipe for desaster. I question the need to call this at all during a package build. kbuildsycoca5 is meant to modify a per-user cache, but that cache is not installed into the binary package. Possibly removing the command is the simplest fix. Helmut
Control: reopen -1 No, this is certainly not fixed in 1:0.9.23-1 as that's the version I reported the bug. Helmut
Hi! Am Charlotte Ann, I have a very important thing to discuss with you, please contact me as soon as possible. Have a nice day, Charlotte Ann
Hi I have spoken to someone from your team regarding the Beauty Products & Cosmetics Shops Email List and B2B Marketing List. As promised, here is some more information about the database and sorry for my delayed response, I have been away on holiday. The Beauty Products & Cosmetics Shops B2B Marketing List contains the contact details of virtually all beauty products and cosmetics shops, brands, wholesalers, distributors and manufacturers from all over the world. Our beauty industry sales leads help to connect your business with tens of thousands of companies operating in the beauty industry. Our beauty industry marketing list comes in an Excel spreadsheet with contact details for every company operating in the beauty industry. Please note: you will receive the beauty industry database in Excel Worksheet and CSV file extension (you can use either) and a list of just emails inside a notepad format. You will also need to extract the files using win.rar - further instructions are provided inside the download files. Our Beauty Industry Marketing List currently contains in excess of 44,000 business records. We are updating our beauty industry busines data on a rolling basis so make sure to check your member's area regularly. You can download a sample and learn more about the database at creativebeartech.com creativebeartech.com sent from my iphone
Hi I have spoken to someone from your team regarding the Beauty Products & Cosmetics Shops Email List and B2B Marketing List. As promised, here is some more information about the database and sorry for my delayed response, I have been away on holiday. The Beauty Products & Cosmetics Shops B2B Marketing List contains the contact details of virtually all beauty products and cosmetics shops, brands, wholesalers, distributors and manufacturers from all over the world. Our beauty industry sales leads help to connect your business with tens of thousands of companies operating in the beauty industry. Our beauty industry marketing list comes in an Excel spreadsheet with contact details for every company operating in the beauty industry. Please note: you will receive the beauty industry database in Excel Worksheet and CSV file extension (you can use either) and a list of just emails inside a notepad format. You will also need to extract the files using win.rar - further instructions are provided inside the download files. Our Beauty Industry Marketing List currently contains in excess of 44,000 business records. We are updating our beauty industry busines data on a rolling basis so make sure to check your member's area regularly. You can download a sample and learn more about the database at creativebeartech.com creativebeartech.com sent from my iphone
Hi I have spoken to someone from your team regarding the Beauty Products & Cosmetics Shops Email List and B2B Marketing List. As promised, here is some more information about the database and sorry for my delayed response, I have been away on holiday. The Beauty Products & Cosmetics Shops B2B Marketing List contains the contact details of virtually all beauty products and cosmetics shops, brands, wholesalers, distributors and manufacturers from all over the world. Our beauty industry sales leads help to connect your business with tens of thousands of companies operating in the beauty industry. Our beauty industry marketing list comes in an Excel spreadsheet with contact details for every company operating in the beauty industry. Please note: you will receive the beauty industry database in Excel Worksheet and CSV file extension (you can use either) and a list of just emails inside a notepad format. You will also need to extract the files using win.rar - further instructions are provided inside the download files. Our Beauty Industry Marketing List currently contains in excess of 44,000 business records. We are updating our beauty industry busines data on a rolling basis so make sure to check your member's area regularly. You can download a sample and learn more about the database at creativebeartech.com creativebeartech.com sent from my iphone
Howdy. You recently signed up to follow one of my posts. This means once you confirm below, you will receive an email when new comments are posted. To activate, click confirm below. If you believe this is an error, ignore this message and nothing more will happen. Blog Name: Schoen Med URL: https://www.schoenmed.com Confirm Follow: https://subscribe.wordpress.com/?key=3e73f872d574005c31d12623f014a086&email=914044%40bugs.debian.org&activate_comment=193645140&n=d0f975eb5ecb3a54ce5754859a78c1e3 If you don't want to receive these emails any more: https://subscribe.wordpress.com/?key=3e73f872d574005c31d12623f014a086&email=914044%40bugs.debian.org If you want to see all of the blogs and posts you follow on the web in one easy place, sign up for a WordPress.com account. (http://wordpress.com/signup/?ref=lof)
Howdy. You recently signed up to follow this blog's posts. This means once you confirm below, you will receive each new post by email. To activate, click Confirm Follow. If you believe this is an error, ignore this message and nothing more will happen. Blog Name: Schoen Med URL: https://www.schoenmed.com Confirm Follow: https://subscribe.wordpress.com/?key=3e73f872d574005c31d12623f014a086&email=914044%40bugs.debian.org&activate=fabe423f5236ef6063f184827f37eb27 If you don't want to receive these emails any more: https://subscribe.wordpress.com/?key=3e73f872d574005c31d12623f014a086&email=914044%40bugs.debian.org If you want to see all of the blogs and posts you follow on the web in one easy place, sign up for a WordPress.com account. (http://wordpress.com/signup/?ref=lof)