Ubuntu
libimobiledevice package

  1. Bug #1164263
  2. Comment #7

Comment 7 for bug 1164263

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libimobiledevice - 1.1.4-1ubuntu6.2

---------------
libimobiledevice (1.1.4-1ubuntu6.2) raring-security; urgency=low

  * SECURITY UPDATE: insecure /tmp usage (LP: #1164263)
    - debian/patches/CVE-2013-2142.patch: fall back to getpwuid_r instead
      of using /tmp in src/userpref.c. Added string_concat() function in
      src/Makefile.am, src/utils.c, src/utils.h.
    - added new symbol to debian/libimobiledevice3.symbols.
    - CVE-2013-2142
 -- Marc Deslauriers <email address hidden> Wed, 14 Aug 2013 11:56:31 -0400