|
Mandriva- Advisories MDKSA-2006:188: Updated mono packages fix vulnerability
Advisories MDKSA-2006:188: Updated mono packages fix vulnerability
Sebastian Krahmer of the SUSE security team found that the System.CodeDom.Compiler classes in mono used temporary files in an insecure way that could allow a symbolic link attack to overwrite arbitrary files with the privileges of the user running a program that made use of those classes.
Updated packages have been patched to correct this issue.
http://mandrivausers.org/index.php?showtopic=36390
Array
Fri, 27 Oct 2006 22:49:01 +0000
|