USN-5-1: gettext vulnerabilities
Recently, Trustix Secure Linux discovered some vulnerabilities in the gettext package. The programs "autopoint" and "gettextize" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-5-1?
USN-5-1 is considered a moderate severity vulnerability due to its potential for a symlink attack.
How do I fix USN-5-1?
To fix USN-5-1, you should update the gettext package to the latest version provided by your Linux distribution.
Which systems are affected by USN-5-1?
USN-5-1 primarily affects Ubuntu Linux version 4.10.
What types of attacks can be executed through USN-5-1?
USN-5-1 can be exploited through symlink attacks allowing unauthorized file creation or overwriting with user privileges.
Are there any tools to detect USN-5-1 vulnerability?
Using package management tools like APT can help identify if the vulnerable version of gettext is installed on the system.