On 12/30/07, Jan <e4ea@xs4all.nl> wrote:
quoted text
> Security fixes in fvwm-menu-directory. (CVE-2006-5969)

i don't get it.  i can make a magic directory name and... run commands
as myself?

quoted text
> Security fixes in FvwmCommand
> Security fix for fvwm-menu-directory. See BugTraq id 9161.
> Security patch in fvwm-bug. See http://securitytracker.com/alerts/2004/Jan/1008781.html

i don't have this program.

quoted text
> Security fixes in fvwm-menu-directory (BugTraq id 9161)

is this different than Bugtraq id 9161 above?  for that matter, how is
it different than CVE-2006-5969?

quoted text
> Security fixes in fvwm_make_directory_menu.sh
> Security fixes in fvwm_make_browse_menu.sh
> Fixed tempfile vulnerabilities in FvwmCommand.
> Fixed detection of safe system version of mkstemp.
> Security fix in fvwm-menu-directory. (CVE-2006-5969)

is this different than CVE-2006-5969 above?