159543 2006-12-31 01:54 0000 app-dicts/stardict: Insecure usage of file in /tmp. 2007-04-02 22:03:50 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED B3? [noglsa] P2 normal --- 1 shellsage@gentoo.org security@gentoo.org app-dicts@gentoo.org liquidx@gentoo.org shellsage@gentoo.org 2006-12-31 01:54:16 0000 The file stardict-config.sh make insecure use of the file "/tmp/fonts.dir" without first checking to see if that file is a symlink. This could allow for the overwriting of arbitrary files on the filesystem when installing stardict. jaervosz@gentoo.org 2007-01-06 12:32:25 0000 app-dicts please advise. jaervosz@gentoo.org 2007-03-25 10:43:57 0000 app-dicts please advise. kevquinn@gentoo.org 2007-03-26 06:50:18 0000 I haven't seen anything from liquidx for a while, so I'll stick my nose in. It seems the script is unused, legacy from version 1.x which are no longer in the tree - so I've just removed it. jaervosz@gentoo.org 2007-03-26 08:10:37 0000 Thx Kevin. This one is ready for GLSA decision. I vote NO as the script itself seems unused/uninstalled. Please correct me if I'm wrong. falco@gentoo.org 2007-04-02 22:03:50 0000 When it's not an everyday usage (contrary to an installation script for example), i vote no. Closing, feel free to reopen if you disagree.