=== modified file 'debian/changelog' --- debian/changelog 2012-03-09 04:31:56 +0000 +++ debian/changelog 2012-03-12 14:54:26 +0000 @@ -1,3 +1,11 @@ +lightdm (1.1.7-0ubuntu2) UNRELEASED; urgency=low + + * debian/guest-account: Fix arbitrary file deletion in removal of guest + files in /tmp. Use find/xargs with 0 separators instead of spaces. + (LP: #953044) + + -- Martin Pitt Mon, 12 Mar 2012 15:53:12 +0100 + lightdm (1.1.7-0ubuntu1) precise; urgency=low * New upstream release. === modified file 'debian/guest-account' --- debian/guest-account 2011-08-09 13:27:33 +0000 +++ debian/guest-account 2012-03-12 14:57:34 +0000 @@ -121,7 +121,7 @@ rm -rf "$HOME" # remove leftovers in /tmp - find /tmp -mindepth 1 -maxdepth 1 -uid "$UID" | xargs rm -rf || true + find /tmp -mindepth 1 -maxdepth 1 -uid "$UID" -print0 | xargs -0 rm -rf || true deluser --system "$USER" }