Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2009-1299

Publication date 18 March 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

Status

Package Ubuntu Release Status
pulseaudio 11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Fixed 1:0.9.22~0.9.21+stable-queue-32-g8478-0ubuntu12
9.10 karmic Ignored
9.04 jaunty Ignored
8.10 intrepid Ignored
8.04 LTS hardy Ignored
6.06 LTS dapper Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
pulseaudio