Gentoo: GLSA-200412-06 Critical: Vulnerabilities in Pkgfetch Utility

Gentoo Linux Security Advisory GLSA 200412-05:02 https://security.gentoo.org/ Severity: Normal Title: mirrorselect: Insecure temporary file creation Date: December 07, 2004 Updated: December 07, 2004 Bugs: #73545 ID: 200412-05:02

Synopsis ======= mirrorselect is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= mirrorselect is a tool to help select distfiles mirrors for Gentoo.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-portage/mirrorselect < 0.89 >= 0.89
========== Ervin Nemeth discovered that mirrorselect creates temporary files in world-writable directories with predictable na...