Lucene search

K
osvGoogleOSV:DSA-603-1
HistoryDec 01, 2004 - 12:00 a.m.

openssl - insecure temporary file

2004-12-0100:00:00
Google
osv.dev
12

EPSS

0

Percentile

5.1%

Trustix developers discovered insecure temporary file creation in a
supplemental script (der_chop) of the openssl package which may allow
local users to overwrite files via a symlink attack.

For the stable distribution (woody) this problem has been fixed in
version 0.9.6c-2.woody.7.

For the unstable distribution (sid) this problem has been fixed in
version 0.9.7e-1.

We recommend that you upgrade your openssl package.