Debian-Sicherheitsankündigung

DSA-037-1 Athena Widget replacement libraries -- Unsichere Verwaltung von temporären Dateien

Datum des Berichts:

07. Mär 2001

Betroffene Pakete:

nextaw
xaw3d
xaw95

Verwundbar:

Sicherheitsdatenbanken-Referenzen:

Im Augenblick ist keine weitere externe Sicherheitsdatenbank-Referenz verfügbar.

Weitere Informationen:

Es wurde berichtet, dass die Ascii und MultiSrc Widgets in der Athena Widget Bibliothek temporäre Dateien unsicher verwalten. Joey Hess hat die Fehlerkorrektur von XFree86 auf diese Xaw-Bibliotheken portiert. Die Korrekturen sind in nextaw 0.5.1-34potato1, xaw3d 1.3-6.9potato1 und xaw95 1.1-4.6potato1 verfügbar.

Behoben in:

Debian 2.2 (potato)

Quellcode:: http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1-34potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1-34potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1.orig.tar.gz; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3-6.9potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3-6.9potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3.orig.tar.gz; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1-4.6potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1-4.6potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1.orig.tar.gz
i386:: http://security.debian.org/dists/stable/updates/main/binary-i386/nextaw_0.5.1-34potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/nextawg_0.5.1-34potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3d_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3dg-dev_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3dg_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw95g_1.1-4.6potato1_i386.deb
m68k:: http://security.debian.org/dists/stable/updates/main/binary-m68k/nextaw_0.5.1-34potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/nextawg_0.5.1-34potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3d_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3dg-dev_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3dg_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw95g_1.1-4.6potato1_m68k.deb