Описание
Security update for gummi
This update for gummi fixes the following issues:
- CVE-2015-7758: Fix an exploitable issue caused by gummi setting predictable file names in /tmp; patch taken from debian patch tracker and submitted upstream (bnc#949682).
Список пакетов
openSUSE Leap 42.1
gummi-0.7.1-5.1
gummi-lang-0.7.1-5.1
Ссылки
- E-Mail link for openSUSE-SU-2015:2369-1
- SUSE Security Ratings
Описание
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc extension for the file name, as demonstrated by .thesis.tex.aux.
Затронутые продукты
openSUSE Leap 42.1:gummi-0.7.1-5.1
openSUSE Leap 42.1:gummi-lang-0.7.1-5.1
Ссылки
- CVE-2015-7758
- SUSE Bug 949682