Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc extension for the file name, as demonstrated by .thesis.tex.aux.

Fix CVE-2015-7758 (rhbz#1270816, rhbz#1270816)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gummi fixes the following issues :

  - CVE-2015-7758: predictable filenames in /tmp based on     basename - use final upstream patch (boo#949682)

This update for gummi fixes the following issues :

  - CVE-2015-7758: Fix an exploitable issue caused by gummi     setting predictable file names in /tmp; patch taken from     debian patch tracker and submitted upstream     (bnc#949682).

ID	Name	Product	Family	Severity
89805	Fedora 22 : gummi-0.6.6-1.fc22 (2016-e21be93421)	Nessus	Fedora Local Security Checks	low
89803	Fedora 23 : gummi-0.6.6-1.fc23 (2016-94b0b50351)	Nessus	Fedora Local Security Checks	low
88978	openSUSE Security Update : gummi (openSUSE-2016-266)	Nessus	SuSE Local Security Checks	low
87629	openSUSE Security Update : gummi (openSUSE-2015-956)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2015-7758

low

Tenable Plugins

low

low

low

low