CVE-2017-18196

Name	CVE-2017-18196
Description	Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	885704

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
leptonlib (PTS)	buster	1.76.0-1+deb10u1	fixed
	buster (security)	1.76.0-1+deb10u2	fixed
	bullseye	1.79.0-1.1+deb11u1	fixed
	sid, trixie, bookworm	1.82.0-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
leptonlib	source	wheezy	(not affected)
leptonlib	source	jessie	(not affected)
leptonlib	source	(unstable)	1.74.4-2	low	885704

[jessie] - leptonlib <not-affected> (Vulnerable code not present)
[wheezy] - leptonlib <not-affected> (Vulnerable code not present)