Debian Security Advisory

DSA-037-1 Athena Widget replacement libraries -- insecure tempfile handling

Date Reported:

07 Mar 2001

Affected Packages:

nextaw
xaw3d
xaw95

Vulnerable:

Yes

Security database references:

No other external database security references currently available.

More information:

It has been reported that the AsciiSrc and MultiSrc widget in the Athena widget library handle temporary files insecurely. Joey Hess has ported the bugfix from XFree86 to these Xaw replacements libraries. The fixes are available in nextaw 0.5.1-34potato1, xaw3d 1.3-6.9potato1, and xaw95 1.1-4.6potato1.

Fixed in:

Debian 2.2 (potato)

Source:: http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1-34potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1-34potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/nextaw_0.5.1.orig.tar.gz; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3-6.9potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3-6.9potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/xaw3d_1.3.orig.tar.gz; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1-4.6potato1.diff.gz; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1-4.6potato1.dsc; http://security.debian.org/dists/stable/updates/main/source/xaw95_1.1.orig.tar.gz
i386:: http://security.debian.org/dists/stable/updates/main/binary-i386/nextaw_0.5.1-34potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/nextawg_0.5.1-34potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3d_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3dg-dev_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw3dg_1.3-6.9potato1_i386.deb; http://security.debian.org/dists/stable/updates/main/binary-i386/xaw95g_1.1-4.6potato1_i386.deb
m68k:: http://security.debian.org/dists/stable/updates/main/binary-m68k/nextaw_0.5.1-34potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/nextawg_0.5.1-34potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3d_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3dg-dev_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw3dg_1.3-6.9potato1_m68k.deb; http://security.debian.org/dists/stable/updates/main/binary-m68k/xaw95g_1.1-4.6potato1_m68k.deb