Bugzilla Bug 65647

Package name:           netpbm
 Advisory ID:            MDKSA-2004:011-1
 Date:                   September 27th, 2004
 Original Advisory Date: February 11th, 2004
 Affected versions:	 10.0, 9.2, Corporate Server 2.1,
			 Multi Network Firewall 8.2
 ______________________________________________________________________

 Problem Description:

 A number of temporary file bugs have been found in versions of NetPBM.
 These could allow a local user the ability to overwrite or create
 files as a different user who happens to run one of the the vulnerable
 utilities.

Update:

 The patch applied made some calls to the mktemp utility with an
 incorrect parameter which prevented mktemp from creating temporary
 files in some scripts.

graphics please confirm and provide a fixed ebuild if necessary.

Mandrake Advisory here:

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011-1

Version 10 is unaffected by this. Graphics please patch 9.12 or advise which
version above 9.20 to mark stable.

Since 10.20 is already stable on amd64 and ppc64, can we try stablizing other
arches on this version? It's been around since February 2004

Yes I think we should have all arches mark a version (>=10.0) of their choice
stable, so that we can get rid of the last 9.x version. Most arches already
have.

Calling missing arches : hppa mips ppc sparc x86
Please test and mark 10.20 (or any other >=10 version) stable.

sparc stable.

stable on ppc

forgot to remove it :-)

10.20 stable on x86

hppa/ia64 stable

I'll draft the GLSA

GLSA 200410-02