USN-194-2: texinfo regression fix

USN-194-1 fixed a vulnerability in the 'texindex' program. Unfortunately this update introduced a regression that caused the program to abort when cleaning up temporary files which are used with extraordinarily large input files. The updated packages fix this...

Fedora Core 4 : texinfo-4.8-4.1 (2005-991)

This package fixes a temporary file name vulnerability in the texindex program CVE-2005-3011. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Mandrake Linux Security Advisory : texinfo (MDKSA-2005:175)

Frank Lichtenheld has discovered that texindex insecurely creates temporary files with predictable filenames. This is exploitable if a local attacker were to create symbolic links in the temporary files directory, pointing to a valid file on the filesystem. When texindex is executed, the file wou...

CVE-2005-3011

The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3011

The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2005-3011

The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3011

CVE-2005-3011 and related texinfo issues affect the GNU texinfo package up to version 4.8 and earlier, specifically in the texindex utility. The root cause is insecure handling of temporary files, allowing a local attacker to overwrite files writable by the victim via a symlink/temporary-file rac...