Debian Security Advisory DSA 118-1: Critical Xsane File Vulnerability

Tim Waugh found several insecure uses of temporary files in the xsane
program, which is used for scanning. This was fixed for Debian/stable
by moving those files into a securely created directory within the
/tmp directory.

This problem has been fixed in version 0.50-5.1 for the stable Debian
distribution and in version 0.84-0.1 for the testing and unstable
distribution of Debian.

We recommend that you upgrade your xsane package.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 2.2 alias potato
------------------------------------

Source archives:


MD5 checksum: 95deb77d4120c18c8d6c52b694e30d63

MD5 checksum: c4...