CVE-2008-1832: Insecure tempfile handling

[James Westby]

Binary package hint: cecilia

Hi,

CVE-2008-1832 states lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Debian fixed this issue in 2.0.5-2.1

Thanks,

James

[James Westby (james-w)]

Hi,

Attached is the diff to merge the change from Debian for Intrepid.

Thanks,

James

[James Westby (james-w)]

Hi,

Attached is the diff for hardy.

Thanks,

James

[James Westby (james-w)]

Hi,

Attached is the diff for gutsy.

Thanks,

James

[Hew (hew)]

Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cecilia - 2.0.5-2ubuntu4.1

---------------
cecilia (2.0.5-2ubuntu4.1) gutsy-security; urgency=high

  * SECURITY UPDATE: lib/prefs.tcl in Cecilia 2.0.5 allows local users to
    overwrite arbitrary files via a symlink attack on the csvers temporary
    file.
  * References:
    - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1832
    - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321
    - LP: #241457
  * Adds debian/patches/13CVE-2008-1832.dpatch. Thanks to Debian, and
    specifically Steffen Joeris for the fix.

 -- James Westby <email address hidden> Fri, 20 Jun 2008 19:02:29 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package cecilia - 2.0.5-2ubuntu5.1

---------------
cecilia (2.0.5-2ubuntu5.1) hardy-security; urgency=low

  * SECURITY UPDATE: lib/prefs.tcl in Cecilia 2.0.5 allows local users to
    overwrite arbitrary files via a symlink attack on the csvers temporary
    file.
  * References:
    - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1832
    - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321
    - LP: #241457
  * Adds debian/patches/13CVE-2008-1832.dpatch. Thanks to Debian, and
    specifically Steffen Joeris for the fix.

 -- James Westby <email address hidden> Fri, 20 Jun 2008 18:12:23 +0100

[Jamie Strandboge (jdstrand)]

Thanks for the debdiffs James, and sorry for the delay.

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug to Ubuntu. dapper has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against dapper is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.