Peter Palfrader
2009-Feb-22 23:43 UTC
[Secure-testing-team] Bug#516669: files owned by !root
Package: git-core Version: 1:1.5.6.5-3 Severity: serious Tags: security Files in /usr/share/git-core are not owned by root on lenny/alpha. weasel at intrepid:~/tmp$ wget -nv http://ftp.at.debian.org/debian/pool/main/g/git-core/git-core_1.5.6.5-3_alpha.deb 2009-02-23 00:40:33 URL:http://ftp.at.debian.org/debian/pool/main/g/git-core/git-core_1.5.6.5-3_alpha.deb [3819436/3819436] -> "git-core_1.5.6.5-3_alpha.deb" [1] weasel at intrepid:~/tmp$ ar x git-core_1.5.6.5-3_alpha.deb weasel at intrepid:~/tmp$ tar tzvf data.tar.gz | grep share/git-core drwxr-xr-x root/root 0 2009-02-12 08:19 ./usr/share/git-core/ drwxr-xr-x buildd/buildd 0 2009-02-12 08:14 ./usr/share/git-core/templates/ drwxr-xr-x buildd/buildd 0 2009-02-12 08:14 ./usr/share/git-core/templates/branches/ -rw-r--r-- buildd/buildd 58 2008-08-07 01:38 ./usr/share/git-core/templates/description drwxr-xr-x buildd/buildd 0 2009-02-12 08:14 ./usr/share/git-core/templates/hooks/ -rw-r--r-- buildd/buildd 207 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-update -rw-r--r-- buildd/buildd 441 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/applypatch-msg -rw-r--r-- buildd/buildd 1196 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/prepare-commit-msg -rw-r--r-- buildd/buildd 887 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/commit-msg -rw-r--r-- buildd/buildd 4262 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-rebase -rw-r--r-- buildd/buildd 510 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-receive -rw-r--r-- buildd/buildd 387 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-applypatch -rw-r--r-- buildd/buildd 152 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-commit -rw-r--r-- buildd/buildd 1706 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-commit -rw-r--r-- buildd/buildd 2910 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/update drwxr-xr-x buildd/buildd 0 2009-02-12 08:14 ./usr/share/git-core/templates/info/ -rw-r--r-- buildd/buildd 240 2008-08-07 01:38 ./usr/share/git-core/templates/info/exclude weasel at intrepid:~/tmp$