Noweb/Noroff Insecure Temporary File Creation Vulnerability

Noweb/Noroff Insecure Temporary File Creation Vulnerability

Solution:
Debian has released an advisory (DSA 323-1). Information about applying fixes is available in the referenced advisory. Fixes are available below.

Gentoo Linux has released an advisory. Users who have installed app-text/noweb are advised to upgrade affected systems to noweb-2.9-r3 by issuing the following commands:

emerge sync
emerge noweb
emerge clean

Norman Ramsey Noweb 2.9 a

Debian nowebm_2.9a-5.1potato_alpha.deb
Alpha
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-5.1_a lpha.deb

Debian nowebm_2.9a-5.1potato_i386.deb
IA-32
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-5.1_i 386.deb

Debian nowebm_2.9a-7.3woody_alpha.deb
Alpha
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_a lpha.deb

Debian nowebm_2.9a-7.3woody_arm.deb
ARM
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_a rm.deb

Debian nowebm_2.9a-7.3woody_hppa.deb
HP
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_h ppa.deb

Debian nowebm_2.9a-7.3woody_i386.deb
IA-32
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_i 386.deb

Debian nowebm_2.9a-7.3woody_m68k.deb
Motorola 680x0
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_m 68k.deb

Debian nowebm_2.9a-7.3woody_mips.deb
Big endian MIPS
http://security.debian.org/pool/updates/main/n/noweb/nowebm_2.9a-7.3_m ips.deb