1. Gentoo Linux Security Advisory
| Advisory Reference | GLSA 200611-21 / kile |
| Release Date | November 27, 2006 |
| Latest Revision | November 27, 2006: 01 |
| Impact | low |
| Exploitable | local |
| Package | Vulnerable versions | Unaffected versions | Architecture(s) |
| app-editors/kile | < 1.9.2-r1 | >= 1.9.2-r1 | All supported architectures |
Related bugreports: #155613
Kile uses default permissions for backup files, potentially leading to information disclosure.
Kile is a TeX/LaTeX editor for KDE.
Kile fails to set the same permissions on backup files as on the original file. This is similar to CVE-2005-1920.
A kile user may inadvertently grant access to sensitive information.
There is no known workaround at this time.
All Kile users should upgrade to the latest version:
Code Listing 3.1: Resolution |
# emerge --sync # emerge --ask --oneshot --verbose ">=app-editors/kile-1.9.2-r1" |