lm-sensors -- insecure temporary file

2005-09-15T00:00:00
ID DSA-814
Type debian
Reporter Debian
Modified 2005-09-15T00:00:00

Description

Javier Fernández-Sanguino Peña discovered that a script of lm-sensors, utilities to read temperature/voltage/fan sensors, creates a temporary file with a predictable filename, leaving it vulnerable for a symlink attack.

The old stable distribution (woody) is not affected by this problem.

For the stable distribution (sarge) this problem has been fixed in version 2.9.1-1sarge2.

For the unstable distribution (sid) this problem has been fixed in version 2.9.1-7.

We recommend that you upgrade your lm-sensors package.