Bug#668779: marked as done (/usr/bin/latex2man: latex2man: predictable /tmp filenames)
Your message dated Mon, 18 Mar 2013 03:15:32 +0000
with message-id <E1UHQXs-0006WX-7r@franck.debian.org>
and subject line Bug#668779: fixed in texlive-extra 2012.20130315-1
has caused the Debian Bug report #668779,
regarding /usr/bin/latex2man: latex2man: predictable /tmp filenames
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
668779: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: /usr/bin/latex2man: latex2man: predictable /tmp filenames
- From: Helmut Grohne <helmut@subdivi.de>
- Date: Sat, 14 Apr 2012 12:53:13 +0200
- Message-id: <20120414105312.GA27733@alf.mars>
Package: texlive-extra-utils
Version: 2011.20120322-1
Severity: important
File: /usr/bin/latex2man
Tags: security
The latex2man utility generates predictable filenames in /tmp:
| $tmp = "/tmp/$CMD.$$";
For the issue to be exploitable the program must be invoked with either
the -H or the -T option. An attacker can use a symbolic link to redirect
the writes to an arbitrary file owned by the invoking user.
Helmut
--- End Message ---
--- Begin Message ---
Source: texlive-extra
Source-Version: 2012.20130315-1
We believe that the bug you reported is fixed in the latest version of
texlive-extra, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 668779@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Norbert Preining <preining@debian.org> (supplier of updated texlive-extra package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 15 Mar 2013 13:28:27 +0900
Source: texlive-extra
Binary: texlive-bibtex-extra texlive-extra-utils texlive-font-utils texlive-formats-extra texlive-generic-extra texlive-math-extra texlive-plain-extra texlive-latex-extra texlive-fonts-extra texlive-music texlive-games texlive-pstricks texlive-publishers texlive-humanities texlive-science texpower pdfjam texlive-latex3 texlive-fonts-extra-doc texlive-humanities-doc texlive-latex-extra-doc texlive-pstricks-doc texlive-publishers-doc texlive-science-doc
Architecture: source all
Version: 2012.20130315-1
Distribution: experimental
Urgency: low
Maintainer: Debian TeX Maintainers <debian-tex-maint@lists.debian.org>
Changed-By: Norbert Preining <preining@debian.org>
Description:
pdfjam - TeX Live: transitional dummy package
texlive-bibtex-extra - TeX Live: Extra BibTeX styles
texlive-extra-utils - TeX Live: TeX auxiliary programs
texlive-font-utils - TeX Live: Graphics and font utilities
texlive-fonts-extra - TeX Live: Extra fonts
texlive-fonts-extra-doc - TeX Live: Documentation files for texlive-fonts-extra
texlive-formats-extra - TeX Live: Extra formats
texlive-games - TeX Live: Games typesetting
texlive-generic-extra - TeX Live: Extra generic packages
texlive-humanities - TeX Live: Humanities packages
texlive-humanities-doc - TeX Live: Documentation files for texlive-humanities
texlive-latex-extra - TeX Live: LaTeX supplementary packages
texlive-latex-extra-doc - TeX Live: Documentation files for texlive-latex-extra
texlive-latex3 - TeX Live: transitional dummy package
texlive-math-extra - TeX Live: Advanced math typesetting
texlive-music - TeX Live: Music typesetting
texlive-plain-extra - TeX Live: Plain TeX supplementary packages
texlive-pstricks - TeX Live: PSTricks packages
texlive-pstricks-doc - TeX Live: Documentation files for texlive-pstricks
texlive-publishers - TeX Live: Support for publishers, theses, standards, conferences,
texlive-publishers-doc - TeX Live: Documentation files for texlive-publishers
texlive-science - TeX Live: Typesetting for natural and computer sciences
texlive-science-doc - TeX Live: Documentation files for texlive-science
texpower - TeX Live: transitional dummy package
Closes: 668779
Changes:
texlive-extra (2012.20130315-1) experimental; urgency=low
.
* texlive-extra-utils now depends on texlive-latex-base to make pdfjam
and friends work out of the box (LP: #1085666)
* fix predictable temp file names in latex2man (Closes: #668779)
(patch by Tatsuya Kinoshita)
Checksums-Sha1:
ae633c2fdc648ac61803fe74126f413b1fc740ac 2668 texlive-extra_2012.20130315-1.dsc
f8cd56282bb492313602cc744ff7b2cca86c1771 809615072 texlive-extra_2012.20130315.orig.tar.xz
fe8141f0c8e56d0a7d59ff7b9b38637fc9e53f43 156904 texlive-extra_2012.20130315-1.debian.tar.gz
26bf51b8d962956cc62349bbdaa7f4e190cce791 28786170 texlive-bibtex-extra_2012.20130315-1_all.deb
263423300d4f04edffb45510531e7c3805d41c11 8264400 texlive-extra-utils_2012.20130315-1_all.deb
976706bc6a34c0ea32504e99c1264092ec2bae5d 1651058 texlive-font-utils_2012.20130315-1_all.deb
f33149ee0f1a711d64129b5f5810378bd70afa9c 1877224 texlive-formats-extra_2012.20130315-1_all.deb
a44e832ec4d4eec040c648fe3d45d7b9ddbd348b 9536638 texlive-generic-extra_2012.20130315-1_all.deb
4f7067418ad083f38eaac4bdecb6938567e52a27 12215876 texlive-math-extra_2012.20130315-1_all.deb
7fbc4c2263ef11220d8222506da26c8ffd8e9937 2694252 texlive-plain-extra_2012.20130315-1_all.deb
50b2d1cc999c010ff7c7eccc7b49e861360410cc 6839364 texlive-latex-extra_2012.20130315-1_all.deb
cc540d07f893c4db7230421406aa63fcad0c6465 128584670 texlive-fonts-extra_2012.20130315-1_all.deb
f9402850901ee055a6846d4b3178513fca73a471 6805916 texlive-music_2012.20130315-1_all.deb
719b0e548e56d667d2a5bb8dee32ceb306370f8b 3310598 texlive-games_2012.20130315-1_all.deb
fabc2e01e035be9e6c902e782b7bee5aa6fc1e6f 26060234 texlive-pstricks_2012.20130315-1_all.deb
f81a55fbf9ba536f76d082f94b4a7422359d745a 1762134 texlive-publishers_2012.20130315-1_all.deb
217e8f08a177e8082a77ca2e799e4bf238a97edc 330786 texlive-humanities_2012.20130315-1_all.deb
8683f1d368b4410eb4192cd83166fcf278284769 2277756 texlive-science_2012.20130315-1_all.deb
9b5deb2f2642f24a6be7bb21959d6795c6f9dba4 52492 texpower_2012.20130315-1_all.deb
861abc474432effd5757262f841b5f24ec724e50 52490 pdfjam_2012.20130315-1_all.deb
c04372eb7037fe79bf2969dd8e9fe2209e9f758e 52498 texlive-latex3_2012.20130315-1_all.deb
980945271fc438c90ebaed2bf57a7407d58d1a68 49537366 texlive-fonts-extra-doc_2012.20130315-1_all.deb
eac736fc186cba36de2c6dda4ff2c4065e88f876 12337798 texlive-humanities-doc_2012.20130315-1_all.deb
3551a62365984cb757393d8f7fba0edcdde4155e 291487220 texlive-latex-extra-doc_2012.20130315-1_all.deb
cff8a090ae5ef85f2612c3890c73c84c6b05bb41 71431350 texlive-pstricks-doc_2012.20130315-1_all.deb
368ae5821a80cbb7fbc303f57ffad45b33bec18d 62304928 texlive-publishers-doc_2012.20130315-1_all.deb
944241c144443cbeb3c92af0fa09e9c1cc6db27e 21209518 texlive-science-doc_2012.20130315-1_all.deb
Checksums-Sha256:
f4287f31c14036f10094c02dbb886bc44428e547a8af45dc6067ba206416fe88 2668 texlive-extra_2012.20130315-1.dsc
247a64524abfdba83cc972bcd080e2c8280e530273058bbfedc9b421c6c7a474 809615072 texlive-extra_2012.20130315.orig.tar.xz
d39122bb6abfcd8c0c41f7c92f2e031c696564010dc22238592250aa8a6be922 156904 texlive-extra_2012.20130315-1.debian.tar.gz
e14ed62cec02d952fe2d241e892c3400547ea7abc847c82214e5718482ca9aba 28786170 texlive-bibtex-extra_2012.20130315-1_all.deb
7f28675edc91115fac522363696a7d4134af6038e062790debe99e7cdb91e972 8264400 texlive-extra-utils_2012.20130315-1_all.deb
70b749bce4c02b5eeb1aaced59ee70bb2824582cf1f3f5ffa9cddc5b8c0ac8b1 1651058 texlive-font-utils_2012.20130315-1_all.deb
9518a60c5d6789a95f3aba3fe19f1f19fcfa4296fb1988d3bb09ec74551fa3fa 1877224 texlive-formats-extra_2012.20130315-1_all.deb
243737dea4f6983e79cbd0c0d700a51b928d5c1a05c5069be4d3e5e85979ff85 9536638 texlive-generic-extra_2012.20130315-1_all.deb
bea8e483232dbc875d7caad553f87b7c0027613acb8dffcbdb84974fd354634e 12215876 texlive-math-extra_2012.20130315-1_all.deb
a25f52b97a631e7237795e63dbbb1e22726eeac1da2e377949e644acdc6178f3 2694252 texlive-plain-extra_2012.20130315-1_all.deb
8d1e07caa0e2efb839ec6e2989607c13adf5b65d2938e87c73cd1e791397f13d 6839364 texlive-latex-extra_2012.20130315-1_all.deb
e682fda1efb898d3ce6da94bb70e032b4bf6de9e95e4eb10149b6863806cb569 128584670 texlive-fonts-extra_2012.20130315-1_all.deb
f999d7c564de5339c059f79e865f6ddc27756b821dceb8eafdce107fd01204fa 6805916 texlive-music_2012.20130315-1_all.deb
2ac6d3ea850bb690b41a7b9b3e7ed73250d8383e6351c6a6e838db4bbcb60dfa 3310598 texlive-games_2012.20130315-1_all.deb
219e591018923279b79394e281932c65ee6e12e12d98c4d748d0da36e3c99223 26060234 texlive-pstricks_2012.20130315-1_all.deb
5c39ba9a78c6266d2c01fef928587a09eb8a124d1d5968fe0d3bcabeee9b3fc0 1762134 texlive-publishers_2012.20130315-1_all.deb
1095a25f552e76f027fdd2582f9f9d6ff35c2456d83a32d29fd265a9d16c521c 330786 texlive-humanities_2012.20130315-1_all.deb
18caaf4f8b6180b4d152ee3485b52967ead47d7da6ea7634dfc193bb7fd66cd1 2277756 texlive-science_2012.20130315-1_all.deb
292fb37d54aa7d5e8736b81fd05c9886536447a1a3ac6e73df6fcc23d7c0f3e3 52492 texpower_2012.20130315-1_all.deb
657206fb93707372a51e6ad085505f3e80c44a5d2c4aad4fb943e1d7c72ab197 52490 pdfjam_2012.20130315-1_all.deb
373c3f4134bab69493c9f5d71debb005745e012900daf9bdae05a1c0cda14579 52498 texlive-latex3_2012.20130315-1_all.deb
b8621656ac96ee489cc06756892274a9d039ae0758a6fde708284233fab15c41 49537366 texlive-fonts-extra-doc_2012.20130315-1_all.deb
5a900dfb0ac0beab413166cd3b9bc52adece231e0f034148abda55627bad3c0b 12337798 texlive-humanities-doc_2012.20130315-1_all.deb
3226dbecf74e6fda28ccdcb3cd66389c054895f44ce88d5a0151ed7201b50dd5 291487220 texlive-latex-extra-doc_2012.20130315-1_all.deb
7c8e54ea8f794aa565786d8cbe46c9fccff25603ba64cc03fd889d0362f19004 71431350 texlive-pstricks-doc_2012.20130315-1_all.deb
fe98ef730056c870d257d1031ef940be6c5b63c9341598591ccd8fe0e7a3fab6 62304928 texlive-publishers-doc_2012.20130315-1_all.deb
4b556c27a8f713be4d9f41157173ccc470af8300f78de93806f31d31006e507d 21209518 texlive-science-doc_2012.20130315-1_all.deb
Files:
e4ce2645775198857844745a0962bd02 2668 tex optional texlive-extra_2012.20130315-1.dsc
47fd26bf6ad8b1755f0b7a742f61f43e 809615072 tex optional texlive-extra_2012.20130315.orig.tar.xz
7fc5b39883542f737307c962a2105abd 156904 tex optional texlive-extra_2012.20130315-1.debian.tar.gz
0897206cd3b9f17fd74fd367f78215c3 28786170 tex optional texlive-bibtex-extra_2012.20130315-1_all.deb
2af110db0a53af69cc99f068deeeac89 8264400 tex optional texlive-extra-utils_2012.20130315-1_all.deb
763acc6a4c4b5a79e3bed3603520426c 1651058 tex optional texlive-font-utils_2012.20130315-1_all.deb
9c62a1a50e608351b66ff16954afd167 1877224 tex optional texlive-formats-extra_2012.20130315-1_all.deb
5e536608f725d06aa412cc82fcc777ab 9536638 tex optional texlive-generic-extra_2012.20130315-1_all.deb
4995a7e8b79d40e7442871395e5e3b46 12215876 tex optional texlive-math-extra_2012.20130315-1_all.deb
baea90d2f084980684bb053a090bbdbb 2694252 tex optional texlive-plain-extra_2012.20130315-1_all.deb
39962ce47bd9b718143f045bee8043da 6839364 tex optional texlive-latex-extra_2012.20130315-1_all.deb
388c1c3ae34f70878475377a3b32ba43 128584670 fonts optional texlive-fonts-extra_2012.20130315-1_all.deb
226052cd9c5d4a2181c9801920fa994f 6805916 tex optional texlive-music_2012.20130315-1_all.deb
85a670d372a6cf6bbd790b78b5010bfe 3310598 tex optional texlive-games_2012.20130315-1_all.deb
07427d363db21bdeacfec1716c9e50fa 26060234 tex optional texlive-pstricks_2012.20130315-1_all.deb
52b6db2a7419ab2270c9ae966cbabc99 1762134 tex optional texlive-publishers_2012.20130315-1_all.deb
239fb3723deb805643a20e4c2003b5f6 330786 tex optional texlive-humanities_2012.20130315-1_all.deb
e1815a52455af75a4dfe4a2cba4c556d 2277756 tex optional texlive-science_2012.20130315-1_all.deb
90ddf8c4406e059d3194804611773e80 52492 oldlibs extra texpower_2012.20130315-1_all.deb
5f009203656bd4f918e85d45543567e0 52490 oldlibs extra pdfjam_2012.20130315-1_all.deb
bdb23d16fdc8b0701b54d79b2af8d92f 52498 oldlibs extra texlive-latex3_2012.20130315-1_all.deb
4006dc38ccf565b8d6ed16f12a7c7fa4 49537366 doc optional texlive-fonts-extra-doc_2012.20130315-1_all.deb
e6878136b6cbd8f66526eb713e62965d 12337798 doc optional texlive-humanities-doc_2012.20130315-1_all.deb
e9fbfb925f79e5be3ea1ebf2f0de0ddd 291487220 doc optional texlive-latex-extra-doc_2012.20130315-1_all.deb
0ba69b97037b73cbf35b5ad4fd073fc1 71431350 doc optional texlive-pstricks-doc_2012.20130315-1_all.deb
0af62b21d05c2ec56b50a9166fd0552d 62304928 doc optional texlive-publishers-doc_2012.20130315-1_all.deb
0d2934f78b33b9de2612954aea3695c6 21209518 doc optional texlive-science-doc_2012.20130315-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFRRl/r0r9KownFsJQRAqxXAJ9HEdlYz+x2RlDy/o602jmeObz1wACeI3ge
hZANKvqOkpl3fgNWqaIeaGI=
=BJck
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: