Joey Hess

The issue is related to the insecure use of temporary files, which can lead to a possible race condition.

The issue is related to a buffer overflow.

The issue arises from Nvu using an outdated version of Mozilla XPCOM, which can lead to multiple security problems.

The issue concerns an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's GPG key, potentially exposing encrypted data that was never stored in git-annex. This attack requires the attacker to have control of a server hosting an encrypted special remote used by the victim's git-annex repository. The attacker can use `git annex addurl --relaxed` with an innocuous URL and then send the content of the GPG-encrypted file they wish to have decrypted when the user downloads the content from the special remote.

The issue concerns a private data exposure and exfiltration attack in git-annex. It could expose the content of files located outside the git-annex repository or content from a private web server on localhost or the LAN. To perform this attack, the attacker needs to have control over one of the remotes of the victim's git-annex repository. The attack can be performed by running `git-annex addurl --relaxed file:///etc/passwd` and committing this to the repository. The attacker can also use URLs to private web servers. The issue was discovered by Joey Hess.

The issue allows remote attackers to cause a denial of service, resulting in a crash.

The issue concerns the GUI of aptlinex, which does not provide adequate warnings to users about potentially dangerous actions. This allows remote attackers to modify or remove packages by using an apt:// URL.

A cross-site request forgery issue allows remote attackers to modify user preferences, including passwords, via the preferences and edit forms.

The issue concerns sensitive information being included in world-readable log files by the Debian installer. This information includes preseeded passwords and pppoeconf passwords, which could potentially allow local users to gain privileges.

The issue allows local users to obtain privileged information, such as session keys, by viewing temporary files created in Driver::File and Driver::db file. This is due to improper permissions set on these files.

The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files used by certain drivers. This can be achieved through drivers such as Driver::File, Driver::db file, and possibly Driver::sqlite.

The issue affects the sharutils package in Red Hat Enterprise Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Specifically, the `unshar` function in `unshar.c` allows local users to overwrite arbitrary files via a symlink attack on the `unsh.X` temporary file.

The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files when DEBUG is enabled.

The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of gzip or bzip ROM files. This is due to a flaw in the romload.c file.