• info
• discussion
• exploit
• solution
• references

GNU GetText Unspecified Insecure Temporary File Creation Vulnerability

Solution:

See the referenced vendor advisories for details on obtaining and applying the appropriate updates.


GNU gettext 0.13.1

• Mandriva gettext-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-0.13.1-1.3.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-base-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-base-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-devel-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-devel-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-java-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gettext-java-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64gettextmisc-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64intl2-0.13.1-1.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libgettextmisc-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libintl2-0.13.1-1.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Ubuntu gettext-base_0.14.1-2ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext-base_0.1 4.1-2ubuntu0.1_amd64.deb


• Ubuntu gettext-base_0.14.1-2ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext-base_0.1 4.1-2ubuntu0.1_i386.deb


• Ubuntu gettext-base_0.14.1-2ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext-base_0.1 4.1-2ubuntu0.1_powerpc.deb


• Ubuntu gettext-doc_0.14.1-2ubuntu0.1_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext-doc_0.14 .1-2ubuntu0.1_all.deb


• Ubuntu gettext-el_0.14.1-2ubuntu0.1_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext-el_0.14. 1-2ubuntu0.1_all.deb


• Ubuntu gettext_0.14.1-2ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext_0.14.1-2 ubuntu0.1_amd64.deb


• Ubuntu gettext_0.14.1-2ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext_0.14.1-2 ubuntu0.1_i386.deb


• Ubuntu gettext_0.14.1-2ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gettext/gettext_0.14.1-2 ubuntu0.1_powerpc.deb

GNU gettext 0.14.1

• Trustix gettext-0.14.1-4tr.i586.rpm
  Trustix Secure Linux 2.1 & Enterprise Server 2
  ftp://ftp.trustix.org/pub/trustix/updates/