Gentoo: 202310-01 Alert: OpenSSH Security Flaw in ssh-agent Usage

Gentoo Linux Security Advisory GLSA 200410-24 https://security.gentoo.org/ Severity: Normal Title: MIT krb5: Insecure temporary file use in send-pr.sh Date: October 25, 2004 Bugs: #66359 ID: 200410-24

Synopsis ======= The send-pr.sh script, included in the mit-krb5 package, is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files with the rights of the user running the utility.
Background ========= MIT krb5 is the free implementation of the Kerberos network authentication protocol written by the Massachusetts Institute of Technology.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected --------------------------------------------------------...