Bug#668779: marked as done (/usr/bin/latex2man: latex2man: predictable /tmp filenames)
Your message dated Thu, 21 Mar 2013 21:47:54 +0000
with message-id <E1UInL0-000135-65@franck.debian.org>
and subject line Bug#668779: fixed in texlive-extra 2009-10+squeeze1
has caused the Debian Bug report #668779,
regarding /usr/bin/latex2man: latex2man: predictable /tmp filenames
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
668779: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: /usr/bin/latex2man: latex2man: predictable /tmp filenames
- From: Helmut Grohne <helmut@subdivi.de>
- Date: Sat, 14 Apr 2012 12:53:13 +0200
- Message-id: <20120414105312.GA27733@alf.mars>
Package: texlive-extra-utils
Version: 2011.20120322-1
Severity: important
File: /usr/bin/latex2man
Tags: security
The latex2man utility generates predictable filenames in /tmp:
| $tmp = "/tmp/$CMD.$$";
For the issue to be exploitable the program must be invoked with either
the -H or the -T option. An attacker can use a symbolic link to redirect
the writes to an arbitrary file owned by the invoking user.
Helmut
--- End Message ---
--- Begin Message ---
Source: texlive-extra
Source-Version: 2009-10+squeeze1
We believe that the bug you reported is fixed in the latest version of
texlive-extra, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 668779@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Norbert Preining <preining@debian.org> (supplier of updated texlive-extra package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 21 Mar 2013 13:45:06 +0900
Source: texlive-extra
Binary: texlive-bibtex-extra texlive-extra-utils texlive-font-utils texlive-formats-extra texlive-generic-extra texlive-math-extra texlive-plain-extra texlive-latex-extra texlive-latex3 texlive-fonts-extra texlive-music texlive-games texlive-pstricks texlive-publishers texlive-humanities texlive-science texlive-fonts-extra-doc texlive-humanities-doc texlive-latex-extra-doc texlive-pstricks-doc texlive-publishers-doc texlive-science-doc
Architecture: source all
Version: 2009-10+squeeze1
Distribution: stable
Urgency: low
Maintainer: Debian TeX Maintainers <debian-tex-maint@lists.debian.org>
Changed-By: Norbert Preining <preining@debian.org>
Description:
texlive-bibtex-extra - TeX Live: Extra BibTeX styles
texlive-extra-utils - TeX Live: TeX auxiliary programs
texlive-font-utils - TeX Live: TeX and Outline font utilities
texlive-fonts-extra - TeX Live: Extra fonts
texlive-fonts-extra-doc - TeX Live: Documentation files for texlive-fonts-extra
texlive-formats-extra - TeX Live: Extra formats
texlive-games - TeX Live: Games typesetting
texlive-generic-extra - TeX Live: Extra generic packages
texlive-humanities - TeX Live: Humanities packages
texlive-humanities-doc - TeX Live: Documentation files for texlive-humanities
texlive-latex-extra - TeX Live: LaTeX supplementary packages
texlive-latex-extra-doc - TeX Live: Documentation files for texlive-latex-extra
texlive-latex3 - TeX Live: LaTeX3 packages
texlive-math-extra - TeX Live: Advanced math typesetting
texlive-music - TeX Live: Music typesetting
texlive-plain-extra - TeX Live: Plain TeX supplementary packages
texlive-pstricks - TeX Live: PSTricks packages
texlive-pstricks-doc - TeX Live: Documentation files for texlive-pstricks
texlive-publishers - TeX Live: Support for publishers, theses, standards, conferences,
texlive-publishers-doc - TeX Live: Documentation files for texlive-publishers
texlive-science - TeX Live: Typesetting for natural and computer sciences
texlive-science-doc - TeX Live: Documentation files for texlive-science
Closes: 668779
Changes:
texlive-extra (2009-10+squeeze1) stable; urgency=low
.
* fix predictable temp file names in latex2man (Closes: #668779)
(patch by Tatsuya Kinoshita)
Checksums-Sha1:
627e1decf384d2e69f8ffa953a52f6e0997a3881 1708 texlive-extra_2009-10+squeeze1.dsc
14f7367dc58f4e27584958438b01ce503fc1e2d8 1407807 texlive-extra_2009-10+squeeze1.diff.gz
8beaba74908e5f1cc6ab9c2ac02a533438f8c563 8748150 texlive-bibtex-extra_2009-10+squeeze1_all.deb
473edcd3ed125439943a01ff80af353106ebc6b9 1584424 texlive-extra-utils_2009-10+squeeze1_all.deb
edbdc7642106396a077dc7ed6785e326317eb507 1790680 texlive-font-utils_2009-10+squeeze1_all.deb
be8bcb836a8bc4811d8fa29cd94d42be5415ef5f 2213832 texlive-formats-extra_2009-10+squeeze1_all.deb
9cc6fbe38365520915720dab38a9e68a5151db3e 2942342 texlive-generic-extra_2009-10+squeeze1_all.deb
8feb37ed2b3123c6885a0d11b3b96d2c8b8a737a 7124596 texlive-math-extra_2009-10+squeeze1_all.deb
891207317db71d28c9697028c341119b9509b93c 3533248 texlive-plain-extra_2009-10+squeeze1_all.deb
1485455729a90ca5996d6d698fa2a84d3d3c62f5 4774478 texlive-latex-extra_2009-10+squeeze1_all.deb
6e43c4c179aa5fed21c5409aed54c7345362366b 6505516 texlive-latex3_2009-10+squeeze1_all.deb
f77363d0c31b53e080b636434161a612cb474e4c 86180142 texlive-fonts-extra_2009-10+squeeze1_all.deb
7eb57157f0ddb0009da5f2d651712ea439d7bb98 1836360 texlive-music_2009-10+squeeze1_all.deb
cf7f3a12a9d2d99b480d933e0a62889448bc644e 3915160 texlive-games_2009-10+squeeze1_all.deb
69adca7c0f0e9af8aa5ced8fa8f3780021c8dd62 25445368 texlive-pstricks_2009-10+squeeze1_all.deb
0214918ace93f1a77909789f980e57450d2032af 2191206 texlive-publishers_2009-10+squeeze1_all.deb
dd3bbe32147ae43dc0f640b4a8fe78de67d04b22 308940 texlive-humanities_2009-10+squeeze1_all.deb
5744914be860c3415dc86d339cd7255185af2729 416742 texlive-science_2009-10+squeeze1_all.deb
221828fa61aace22ff1eee7310da50b57eec6782 22949420 texlive-fonts-extra-doc_2009-10+squeeze1_all.deb
8993edadd5491260d1be4e447121765941881d09 8808044 texlive-humanities-doc_2009-10+squeeze1_all.deb
025917a23e30acf573c2c1aea43156091267bd5d 192777950 texlive-latex-extra-doc_2009-10+squeeze1_all.deb
a6093ead0d59adb811a0447183110c2b512ad10a 57978992 texlive-pstricks-doc_2009-10+squeeze1_all.deb
f48007213acf91a5327909cc37aa5d86349b8c9c 34278196 texlive-publishers-doc_2009-10+squeeze1_all.deb
a3c526514cf4d47a8e2a486b373a981ebe8e7129 10006796 texlive-science-doc_2009-10+squeeze1_all.deb
Checksums-Sha256:
ac25d37f1261be2a18961663639f33c6d947f716a490a80ec6f35cb365903e11 1708 texlive-extra_2009-10+squeeze1.dsc
f401eeebbb0cca77cea73b92bf355fc9a3cff5656b4305d9e01b84602a4e4b8e 1407807 texlive-extra_2009-10+squeeze1.diff.gz
ac6140fbf7bba8cf236f41cdea6b796917f6a507d83afc375f40e4eaa94b0981 8748150 texlive-bibtex-extra_2009-10+squeeze1_all.deb
de1b1e12c2f624861d0a607d01377056291e97707fab07c77441e09816e2b495 1584424 texlive-extra-utils_2009-10+squeeze1_all.deb
1b233df6de5a8e73d92aeee341c6f805e87ac32a9e8bb63778a66e908579379b 1790680 texlive-font-utils_2009-10+squeeze1_all.deb
e413a68e6dbf582a851e669cfedafa042d59fc9eef21827234740996d03a36c4 2213832 texlive-formats-extra_2009-10+squeeze1_all.deb
cf9cef60be4e4d0c19629d9181b370cdc88b1ba4c986b969fb4d4eeee2eaf5e3 2942342 texlive-generic-extra_2009-10+squeeze1_all.deb
a21089dd3e8e520f88744cd731ecc90c0833ba091c1a87c513b02e312cbb4022 7124596 texlive-math-extra_2009-10+squeeze1_all.deb
ebde09b487bfd7e0ebad1f66c41329df0ad28add0f480a5bc31c5d13d8f95f35 3533248 texlive-plain-extra_2009-10+squeeze1_all.deb
6a38e88145b42a3081b716254526513de28a92961a739f31a36deda733c47061 4774478 texlive-latex-extra_2009-10+squeeze1_all.deb
d6603197222c48f9b1d1e653d10eff3d21e35f3a9996e12cf71b57388abc5570 6505516 texlive-latex3_2009-10+squeeze1_all.deb
e0edcc824165b24ce21b8e9505aadc0c94a410bf71cbc8e56745a48f5ffff437 86180142 texlive-fonts-extra_2009-10+squeeze1_all.deb
1901c4ed44b3429a42998b6b3e93ad7687460c9f1bf59de9c14758641ca919dc 1836360 texlive-music_2009-10+squeeze1_all.deb
4da1be9f13c9a664cde74a8f8063b2c8f0005f33b08b760f8df41f6151a1a95e 3915160 texlive-games_2009-10+squeeze1_all.deb
7642a874a4ea364d7b6eed6d222ccba2a3993464da7fe8f1719f1dbc7b722419 25445368 texlive-pstricks_2009-10+squeeze1_all.deb
f2e883575c2626efbc3a4596013146df94023514bd55e424085698a77a1d4072 2191206 texlive-publishers_2009-10+squeeze1_all.deb
c357755710a7f52b5be262c881a64817924c44a3ff9ee37571b5afd6f3dc903c 308940 texlive-humanities_2009-10+squeeze1_all.deb
b25b5782679e3eed4676a7ab81532a8d7ca7ca217682fc71e48177f03f7be31a 416742 texlive-science_2009-10+squeeze1_all.deb
4e520ce78d481d410b765d4bf470758a725e648295fa3e4298a662c67d46339d 22949420 texlive-fonts-extra-doc_2009-10+squeeze1_all.deb
b503c782057161921085fdef1596ccbb8ab38a9a0e7633990d071f3b6716bbec 8808044 texlive-humanities-doc_2009-10+squeeze1_all.deb
a9e7276b6e13a518262c3c3a9c72a0dff22663fff580c93bea82c878ac7aeea5 192777950 texlive-latex-extra-doc_2009-10+squeeze1_all.deb
1870e35e82e5c684e65e0dec30751f6c8ab96ff5c590568c2f033b3d5edc28a2 57978992 texlive-pstricks-doc_2009-10+squeeze1_all.deb
3316007aa8066f15513c1a9b829100889d637d57e22bdce315bb9870015cec9e 34278196 texlive-publishers-doc_2009-10+squeeze1_all.deb
db970c8c91006d6dc9e1f1caf4139671bac7069628fd9e75eabb89a137797385 10006796 texlive-science-doc_2009-10+squeeze1_all.deb
Files:
1e953354d696bdc82ccf2b50652dd1bf 1708 tex optional texlive-extra_2009-10+squeeze1.dsc
0fbf4f267fdff0130fc02bf7fd73a84f 1407807 tex optional texlive-extra_2009-10+squeeze1.diff.gz
23127e72c0e7024131a6cbe33929a699 8748150 tex optional texlive-bibtex-extra_2009-10+squeeze1_all.deb
927a78d5cc15a46ddf1b3b9914f4bd18 1584424 tex optional texlive-extra-utils_2009-10+squeeze1_all.deb
063c4fff2786925d5e5dee3de324a78f 1790680 tex optional texlive-font-utils_2009-10+squeeze1_all.deb
2853a8fd0ff2e4cba45968e5e89e37b2 2213832 tex optional texlive-formats-extra_2009-10+squeeze1_all.deb
d3fd6334efc21bdeeb2f9862bfdc7a3b 2942342 tex optional texlive-generic-extra_2009-10+squeeze1_all.deb
ad59cbe9b96a281a41f698186701c8f4 7124596 tex optional texlive-math-extra_2009-10+squeeze1_all.deb
5fca27a5198f2881f00dda8ed5b591f7 3533248 tex optional texlive-plain-extra_2009-10+squeeze1_all.deb
ae59b46f7ef247fd6990d613f117a158 4774478 tex optional texlive-latex-extra_2009-10+squeeze1_all.deb
9db95a0880bab231860e614ff4bab6f5 6505516 tex optional texlive-latex3_2009-10+squeeze1_all.deb
90742ff17ebbc026cfe7b3a163f4118c 86180142 fonts optional texlive-fonts-extra_2009-10+squeeze1_all.deb
7b88da8a1315ed49bfdfc8115cc43e57 1836360 tex optional texlive-music_2009-10+squeeze1_all.deb
90c7bf9d164aff20a5cbbfc4ced6fcd0 3915160 tex optional texlive-games_2009-10+squeeze1_all.deb
3e98146f1815bd3f8635eb0b80717258 25445368 tex optional texlive-pstricks_2009-10+squeeze1_all.deb
afd1f35a6c503b49431d329b3c4b404b 2191206 tex optional texlive-publishers_2009-10+squeeze1_all.deb
fce82523565ec4f5b31c968b8c8ca013 308940 tex optional texlive-humanities_2009-10+squeeze1_all.deb
f11f3c9c4cfb0144bd8e13ba5840b5d0 416742 tex optional texlive-science_2009-10+squeeze1_all.deb
416915bb046a7cae3688d0f480ae38bf 22949420 doc optional texlive-fonts-extra-doc_2009-10+squeeze1_all.deb
7146bd05b2d83b4aec941c5da2ae2adf 8808044 doc optional texlive-humanities-doc_2009-10+squeeze1_all.deb
ca2f20235f5c4527339bcf093b62c932 192777950 doc optional texlive-latex-extra-doc_2009-10+squeeze1_all.deb
3ae986540053dd209cc6a1084575ba47 57978992 doc optional texlive-pstricks-doc_2009-10+squeeze1_all.deb
08214e4ef2bd5c406770c7fc55205f21 34278196 doc optional texlive-publishers-doc_2009-10+squeeze1_all.deb
db74eb3cf5ab659966df3c7070d07dab 10006796 doc optional texlive-science-doc_2009-10+squeeze1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFRSuAl0r9KownFsJQRAhsOAJ4sT+76pDQvIBjrzjKH5aFk8g30AwCffRAg
+FM1iVBXBT3IFO3eNDfAAv8=
=um4D
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: