Ubuntu 13.04: USN-1979-1 Moderate: txt2man File Overwrite Threat

ubuntu

September 30, 2013

txt2man could be made to overwrite files.

Summary

txt2man could be made to overwrite files.

Software Description:

- txt2man: Converts flat ASCII text to man page format

Details:

Patrick J Cherry discovered that txt2man contained leftover debugging code

that incorrectly created a temporary file. A local attacker could possibly

use this issue to overwrite arbitrary files. In the default Ubuntu

installation, this should be prevented by the Yama link restrictions.

Topics Covered

security advisory moderate file overwrite Ubuntu txt2man

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  txt2man                         1.5.5-4ubuntu0.13.04.1

Ubuntu 12.10:
  txt2man                         1.5.5-4ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  txt2man                         1.5.5-4ubuntu0.12.04.1

In general, a standard system update will make all the necessary changes.