[Bug 1378680] Re: Insecure tempfile handling

Marc Deslauriers marc.deslauriers at canonical.com
Wed Oct 8 12:12:53 UTC 2014


Thanks for the debdiffs, I'll prepare security updates.

** Changed in: apt (Ubuntu Trusty)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: apt (Ubuntu Precise)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: apt (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: apt (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: apt (Ubuntu Precise)
   Importance: Undecided => Medium

** Changed in: apt (Ubuntu Trusty)
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1378680

Title:
  Insecure tempfile handling

Status in “apt” package in Ubuntu:
  In Progress
Status in “apt” source package in Precise:
  Confirmed
Status in “apt” source package in Trusty:
  Confirmed
Status in “apt” source package in Utopic:
  In Progress
Status in “apt” package in Debian:
  Fix Released

Bug description:
  Apt creates the tempfile for apt-get changelog in a insecure fashion.
  See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763780 for the
  details

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1378680/+subscriptions



More information about the foundations-bugs mailing list