CVE-2014-1638

CVE-2014-1638 affects localepurge (before 0.7.3.2). The Debian/localepurge.config script creates a safe temporary file via tempfile, but then appends a suffix to the original filename and writes to this new filename. This allows a local user to overwrite arbitrary files through a symlink attack o...