Description
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gajim | 0.15-1.1 | — |
| Debian 13 | gajim | 0.15-1.1 | — |
| Debian 12 | gajim | 0.15-1.1 | — |
| Debian 6.0 | gajim | 0.13.4-3+squeeze2 | DSA-2453-2, DSA-2453-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | gajim | 0.16.6-1.1 | openSUSE-SU-2024:10547-1 |
Advisories 3
- DSA-2453-1 gajim - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2453-2 gajim - regression Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10547-1 gajim-0.16.6-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20120410 gajim insecure file creation when using latex mailing-list
- http://hg.gajim.org/gajim/rev/f046e4aaf7d4
- FEDORA-2012-6061 vendor-advisory
- 53017 vdb-entry
- 48794 third-party-advisory
- https://trac.gajim.org/changeset/13759/src/common/latex.py
- GLSA-201208-04 vendor-advisory
- gajim-gettmpfilename-symlink(74869) vdb-entry
- 48695 third-party-advisory
- FEDORA-2012-6161 vendor-advisory
- [oss-security] 20120410 RE: gajim insecure file creation when using latex mailing-list
- FEDORA-2012-6001 vendor-advisory