Lucene search

K
osvGoogleOSV:DLA-366-1
HistoryDec 10, 2015 - 12:00 a.m.

arts - security update

2015-12-1000:00:00
Google
osv.dev
9

0.0004 Low

EPSS

Percentile

5.1%

It has been reported that arts uses the insecure mktemp() function
to create the temporary directory it uses to host user-specific sockets.
It is thus possible for another user to hijack this temporary directory
and gain IPC access it should not have.

In Debian 6 Squeeze, this issue has been addressed in arts
1.5.9-3+deb6u1 with the use of the safer mkdtemp() function.
We recommend that you upgrade your arts packages.

Other Debian releases do not have the arts package.

CPENameOperatorVersion
artseq1.5.9-3
artseq1.5.9-3+avr32

0.0004 Low

EPSS

Percentile

5.1%