|
|
>> Fedora Security Update Fixes GnuCash Insecure Temporary File Creation Vulnerability
|
Title : Fedora Security Update Fixes GnuCash Insecure Temporary File Creation Vulnerability
VUPEN ID : VUPEN/ADV-2007-0773
CVE ID : CVE-2007-0007
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2007-02-28
|
Fedora has released security updates to address a vulnerability has been identified in GnuCash. This issue could be exploited by malicious users to conduct symlink attacks. For additional information, see : VUPEN/ADV-2007-0653
Affected Products
Fedora Core 6
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
77ec9e1e248b6550ec119908810ffee47be86cf2 SRPMS/gnucash-2.0.5-1.fc6.src.rpm
77ec9e1e248b6550ec119908810ffee47be86cf2 noarch/gnucash-2.0.5-1.fc6.src.rpm
a351bf97bdccd34710a84e78a4400274f0cea8d8 ppc/debug/gnucash-debuginfo-2.0.5-1.fc6.ppc.rpm
f57bda11cb16ec32efb4387037fb8f551dc37ad4 ppc/gnucash-2.0.5-1.fc6.ppc.rpm
c4317785a92c1d2cf53f220c57a9fe82e64e28e2 x86_64/debug/gnucash-debuginfo-2.0.5-1.fc6.x86_64.rpm
8bcc378fb1760b3c16288613871c029fd91216df x86_64/gnucash-2.0.5-1.fc6.x86_64.rpm
e9ad43bff3a7d4af8ec32c506ed08541cd613e1b i386/gnucash-2.0.5-1.fc6.i386.rpm
943d9d94ccf0188988a1bda42c8d1e9229d83b06 i386/debug/gnucash-debuginfo-2.0.5-1.fc6.i386.rpm
References
http://www.vupen.com/english/advisories/2007/0773
https://www.redhat.com/archives/fedora-package-announce/2007-February/msg00157.html
ChangeLog
2007-02-28 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
