Fedora: 2: im-sdk Insecure temporary file vulnerability
Summary
IIIMF is a next generation multilingual Unicode input method framework,
which is a replacement of existing input method frameworks such as XIM.
This IIIMF implementation includes Language Engines for various Asian
languages allowing one to switch between inputting complex charactersin a number of different languages in supported applications.
Update Information:
The im-switch that is included in the Fedora Core iiimf-x package
has been fixed to take appropriate precautions when generating
temporary files.
* Mon Jul 05 2004 Jens Petersen <petersen@redhat.com> - 1:11.4-46.1.svn1587
- fix im-switch to use mktemp to generate temp file securely
(Tatsuo Sekine, 126940)
This update can be downloaded from:
24099c1a908d3cf91fd3fcd0cf819702 SRPMS/im-sdk-11.4-46.1.svn1587.src.rpm
220fff6d7c7d6ae6c6959e54aadb6a97 x86_64/iiimf-csconv-11.4-46.1.svn1587.x86_64.rpm
d00917c7cbcd45b37e035149a97760d8 x86_64/iiimf-protocol-lib-11.4-46.1.svn1587.x86_64.rpm
a0195ae081724d55a5d77c3330ff31f9 x86_64/iiimf-protocol-lib-devel-11.4-46.1.svn1587.x86_64.rpm
105b29382ca9548cf5db880c9456d981 x86_64/iiimf-client-lib-11.4-46.1.svn1587.x86_64.rpm
93810869492d32f133f879b7a5d47f0e x86_64/iiimf-client-lib-devel-11.4-46.1.svn1587.x86_64.rpm
5911c376fc0010fac972ad6997d562c8 x86_64/iiimf-server-11.4-46.1.svn1587.x86_64.rpm
50b5765f7333fd9cd3446de2ef1467f7 x86_64/iiimf-le-unit-11.4-46.1.svn1587.x86_64.rpm
7e20fd63eabed372a3ef291440944843 x86_64/iiimf-le-newpy-11.4-46.1.svn1587.x86_64.rpm
5f6aca95994e41da760bdc7e4f64b1d9 x86_64/iiimf-le-hangul-11.4-46.1.svn1587.x86_64.rpm
659945e0188122ac7a8aa2c4590b77e6 x86_64/iiimf-le-canna-11.4-46.1.svn1587.x86_64.rpm
c426fd160a29d7133b9d58b12127b162 x86_64/iiimf-x-11.4-46.1.svn1587.x86_64.rpm
2346ce0593a608ac78b496b22204d0d4 x86_64/iiimf-gtk-11.4-46.1.svn1587.x86_64.rpm
68cb1abde122b101811c9e3ed46bccd5 x86_64/iiimf-docs-11.4-46.1.svn1587.x86_64.rpm
a209e2d4e25ab1087a98d3b34a4b2afb x86_64/iiimf-emacs-11.4-46.1.svn1587.x86_64.rpm
2dda733f33fcc1db5a5054c640a54e3d x86_64/debug/im-sdk-debuginfo-11.4-46.1.svn1587.x86_64.rpm
82bdd2e59b76190814d076225c8bca21 i386/iiimf-csconv-11.4-46.1.svn1587.i386.rpm
0ee1159826fb92784712108a76780497 i386/iiimf-protocol-lib-11.4-46.1.svn1587.i386.rpm
774a22897c9eaa9b086f4ed98b6a7dce i386/iiimf-protocol-lib-devel-11.4-46.1.svn1587.i386.rpm
5b5845bff2ac7d524b5beea911099952 i386/iiimf-client-lib-11.4-46.1.svn1587.i386.rpm
fdc9e5cacf62741f6a7fdf609a1ca54c i386/iiimf-client-lib-devel-11.4-46.1.svn1587.i386.rpm
2e132c31a4dcba94d3410d668247c976 i386/iiimf-server-11.4-46.1.svn1587.i386.rpm
14791522c3a29295c2a0b0c5cf3eb589 i386/iiimf-le-unit-11.4-46.1.svn1587.i386.rpm
3f0981a98f6c59f921d50dd966debb25 i386/iiimf-le-newpy-11.4-46.1.svn1587.i386.rpm
207ced737e624d337421fdce7fec04c4 i386/iiimf-le-hangul-11.4-46.1.svn1587.i386.rpm
3ecd59990f34f4a14d8b20a31f764cf4 i386/iiimf-le-canna-11.4-46.1.svn1587.i386.rpm
430f2713d656ae2aed1c6f251bb7fb9f i386/iiimf-x-11.4-46.1.svn1587.i386.rpm
639ab61b32be36702baf14f30a1c9d2d i386/iiimf-gtk-11.4-46.1.svn1587.i386.rpm
81abe4824f4d61882c6d043c833ff00a i386/iiimf-docs-11.4-46.1.svn1587.i386.rpm
3865554b1fc6fc2139c21c4e682cf25c i386/iiimf-emacs-11.4-46.1.svn1587.i386.rpm
a18cd4d3938acd85d3cdae0d65ba65e1 i386/debug/im-sdk-debuginfo-11.4-46.1.svn1587.i386.rpm
This update can also be installed with the Update Agent; you can
--
fedora-announce-list mailing list
fedora-announce-list@redhat.com
fedora-announce-list Info Page
Change Log
References
Fedora Update Notification FEDORA-2004-208 2004-07-08 Product : Fedora Core 2 Name : im-sdk Version : 11.4 Release : 46.1.svn1587 Summary : IIIMF multilingual Unicode input method framework Description : IIIMF is a next generation multilingual Unicode input method framework, which is a replacement of existing input method frameworks such as XIM. This IIIMF implementation includes Language Engines for various Asian languages allowing one to switch between inputting complex charactersin a number of different languages in supported applications.
Update Instructions
