CVE-2014-1638

1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

CVE-2014-1638

CVE-2014-1638 affects localepurge (before 0.7.3.2). The Debian/localepurge.config script creates a safe temporary file via tempfile, but then appends a suffix to the original filename and writes to this new filename. This allows a local user to overwrite arbitrary files through a symlink attack o...