This bug was fixed in the package open-iscsi - 2.0.870.1-0ubuntu11

---------------
open-iscsi (2.0.870.1-0ubuntu11) karmic; urgency=low

  * open-iscsi-utils Replaces: old versions of open-iscsi.
  * SECURITY UPDATE: temporary file vulnerability (LP: #408915)
    - utils/iscsi_discovery: store iscsiadm -m discovery result in a
      variable rather than writing it to an insecurely-created temporary
      file
    - CVE-2009-1297

 -- Colin Watson <[email protected]>   Mon, 24 Aug 2009 23:42:10 +0100

** Changed in: open-iscsi (Ubuntu Karmic)
       Status: Confirmed => Fix Released

-- 
Temporary file vulnerability in iscsi_discovery
https://bugs.launchpad.net/bugs/408915
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to