SB2011101303 - Gentoo update for feh

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2010-2246)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.

2) Link following (CVE-ID: CVE-2011-0702)

The vulnerability allows a remote non-authenticated attacker to manipulate or delete data.

The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.

3) Link following (CVE-ID: CVE-2011-1031)

The vulnerability allows a remote non-authenticated attacker to manipulate or delete data.

The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.

Remediation

Install update from vendor's website.

References

• https://security.gentoo.org/
• https://security.gentoo.org/glsa/201110-08