Oval Definition:oval:com.ubuntu.xenial:def:201686050000000
Revision Date:2017-01-12Version:1
Title:CVE-2016-8605 on Ubuntu 16.04 LTS (xenial) - low.
Description:The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-8605
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • guile-1.8 package in xenial is affected and needs fixing.
  • OR guile-2.0 package in xenial is affected and needs fixing.
  • BACK