storebackup - several

Several vulnerabilities have been discovered in the backup utility
storebackup. The Common Vulnerabilities and Exposures project identifies
the following problems:

• CVE-2005-3146
  Storebackup creates a temporary file predictably, which can be
  exploited to overwrite arbitrary files on the system with a symlink
  attack.
• CVE-2005-3147
  The backup root directory wasn’t created with fixed permissions, which may lead to
  inproper permissions if the umask is too lax.
• CVE-2005-3148
  The user and group rights of symlinks are set incorrectly when making
  or restoring a backup, which may leak sensitive data.

The old stable distribution (woody) doesn’t contain storebackup packages.

For the stable distribution (sarge) these problems have been fixed in
version 1.18.4-2sarge1.

For the unstable distribution (sid) these problems have been fixed in
version 1.19-2.

We recommend that you upgrade your storebackup package.