Debian 3.0 DSA 636-1 Moderate: Glibc Insecure Temporary Files Advisory

debian

January 12, 2005

Several insecure uses of temporary files have been discovered in support scripts in the libc6 package which provices the c library for a GNU/Linux system

Topics Covered

security advisory debian insecure files local exploit glibc attack fix script vulnerability

Summary

For the unstable distribution (sid) these problems have been fixed in
version 2.3.2.ds1-20.

We recommend that you upgrade your libc6 package.

Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Size/MD5 checksum: 1458 bc2b80a7f76bbf4243fa86f5245f5a50
Size/MD5 checksum: 399970 4e1576598f13f2a628b3eef2c9bcdc48
Size/MD5 checksum: 11370961 bf5653fdff22ee350bd7d48047cffab9

Architecture independent components:

Size/MD5 checksum: 2699182 c7a50fe321349d3593a8aa14a1a2c86a
Size/MD5 checksum: 3387...