Gentoo: GLSA 202310-01 Critical: GnuPG Vulnerability Exploit Risk

Gentoo Linux Security Advisory GLSA 200510-04 https://security.gentoo.org/ Severity: Normal Title: Texinfo: Insecure temporary file creation Date: October 05, 2005 Bugs: #106105 ID: 200510-04

Synopsis ======= Texinfo is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= Texinfo is the official documentation system created by the GNU project.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-apps/texinfo < 4.8-r1 >= 4.8-r1
========== Frank Lichtenheld has discovered that the "sort_offline()" function in texindex insecurely creates temporary files with predictable filenames.
Impact ===== A l...