diff -u hugin-0.6.1/debian/changelog hugin-0.6.1/debian/changelog --- hugin-0.6.1/debian/changelog +++ hugin-0.6.1/debian/changelog @@ -1,3 +1,10 @@ +hugin (0.6.1-1.1) unstable; urgency=high + + * Non-maintainer upload by testing security team. + * Fix insecure temp file handling (CVE-2007-5200) (Closees: #447344). + + -- Nico Golde Wed, 24 Oct 2007 18:31:00 +0200 + hugin (0.6.1-1) unstable; urgency=low * Initial release (Closes: #251618) only in patch2: unchanged: --- hugin-0.6.1.orig/src/hugin/AutoCtrlPointCreator.cpp +++ hugin-0.6.1/src/hugin/AutoCtrlPointCreator.cpp @@ -224,8 +224,7 @@ wxSetWorkingDirectory(apDir); } #endif - - wxString ptofile(wxT("autopano_result_tempfile.pto")); + wxString ptofile = wxFileName::CreateTempFileName(wxT("ap_res")); autopanoArgs.Replace(wxT("%o"), ptofile); wxString tmp; tmp.Printf(wxT("%d"), nFeatures); @@ -415,7 +414,7 @@ imgNr++; } - wxString ptofile(wxT("autopano_result_tempfile")); + wxString ptofile = wxFileName::CreateTempFileName(wxT("ap_res")); autopanoArgs.Replace(wxT("%o"), ptofile); wxString tmp; tmp.Printf(wxT("%d"), nFeatures); only in patch2: unchanged: --- hugin-0.6.1.orig/src/Panorama/PTOptimise.cpp +++ hugin-0.6.1/src/Panorama/PTOptimise.cpp @@ -36,8 +36,8 @@ #include #include -#define DEBUG_WRITE_OPTIM_OUTPUT -#define DEBUG_WRITE_OPTIM_OUTPUT_FILE "hugin_debug_optim_results.txt" +//#define DEBUG_WRITE_OPTIM_OUTPUT +//#define DEBUG_WRITE_OPTIM_OUTPUT_FILE "hugin_debug_optim_results.txt" using namespace std; using namespace PT;