[linux-security] mgetty bugs

[Martin Siegert <siegert@sfu.ca>]

Topic
=====
insecure tempfile in mgetty

Problem Description
===================
mgetty does not create temporary files in a secure
manner, which could lead to a symlink attack.

Affected Versions
=================
mgetty versions < 1.1.24

Solution
========
Upgrade to versions 1.1.24 or later.

Redhat 6.x
----------
rpm -Fvh mgetty-1.1.25-4.6.i386.rpm \
         mgetty-sendfax-1.1.25-4.6.i386.rpm \
         mgetty-viewfax-1.1.25-4.6.i386.rpm \
         mgetty-voice-1.1.25-4.6.i386.rpm

RedHat 7.x
----------
rpm -Fvh mgetty-1.1.25-5.i386.rpm \
         mgetty-sendfax-1.1.25-5.i386.rpm \
         mgetty-viewfax-1.1.25-5.i386.rpm \
         mgetty-voice-1.1.25-5.i386.rpm

Debian 2.2 (potato)
-------------------
upgrade to mgetty_1.1.21-3potato1_i386.deb,
           mgetty-fax_1.1.21-3potato1_i386.deb,
           mgetty-viewfax_1.1.21-3potato1_i386.deb,
           mgetty-voice_1.1.21-3potato1_i386.deb

Mandrake 7.1
------------
rpm -Fvh mgetty-1.1.24-1.2mdk.i586.rpm \
         mgetty-contrib-1.1.24-1.2mdk.i586.rpm \
         mgetty-sendfax-1.1.24-1.2mdk.i586.rpm \
         mgetty-viewfax-1.1.24-1.2mdk.i586.rpm \
         mgetty-voice-1.1.24-1.2mdk.i586.rpm

Mandrake 7.2
------------
rom -Fvh mgetty-1.1.24-1.1mdk.i586.rpm \
         mgetty-contrib-1.1.24-1.1mdk.i586.rpm \
         mgetty-sendfax-1.1.24-1.1mdk.i586.rpm \
         mgetty-viewfax-1.1.24-1.1mdk.i586.rpm \
         mgetty-voice-1.1.24-1.1mdk.i586.rpm