CVE-2009-1299

Publication date 18 March 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

Status

Package Ubuntu Release Status
pulseaudio 11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Fixed 1:0.9.22~0.9.21+stable-queue-32-g8478-0ubuntu12
9.10 karmic Ignored end of life
9.04 jaunty Ignored end of life
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
pulseaudio