CVE-2014-1640

CVE-2014-1640 affects the axiom package (version 20100701-1.1). The vulnerability arises from axiom-test.sh using tempfile to create a temporary file, but then appending a suffix to the original filename and writing to that new filename. This behavior permits local users to overwrite arbitrary fi...