Package: pdfjam
Version: 1.20-2
Severity: important
Tags: security

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for pdfjam.

CVE-2008-5743[0]:
| pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with 
a
| predictable name, which allows local users to overwrite arbitrary
| files via a symlink attack.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5743
    http://security-tracker.debian.net/tracker/CVE-2008-5743



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to