Kile: Incorrect backup file permission
1.
Gentoo Linux Security Advisory
Version Information
| Advisory Reference |
GLSA 200611-21 / kile |
| Release Date |
November 27, 2006 |
| Latest Revision |
November 27, 2006: 01 |
| Impact |
low |
| Exploitable |
local |
| Package |
Vulnerable versions |
Unaffected versions |
Architecture(s) |
| app-editors/kile |
<
1.9.2-r1 |
>=
1.9.2-r1 |
All supported architectures
|
Related bugreports:
#155613
Synopsis
Kile uses default permissions for backup files, potentially leading to
information disclosure.
2.
Impact Information
Background
Kile is a TeX/LaTeX editor for KDE.
Description
Kile fails to set the same permissions on backup files as on the
original file. This is similar to CVE-2005-1920.
Impact
A kile user may inadvertently grant access to sensitive information.
3.
Resolution Information
Workaround
There is no known workaround at this time.
Resolution
All Kile users should upgrade to the latest version:
Code Listing 3.1: Resolution |
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-editors/kile-1.9.2-r1"
|
4.
References
|
