UnratedFix available
gettext — security advisory
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
- Products
- gettext
- Affected versions
- Not specified
- Fixed versions
- 0.14.1-6
- CVEs
- CVE-2004-0966
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:26 UTC · Revision 1
Source evidence
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
osv:DEBIAN-CVE-2004-0966
gettext
Fixed versions: 0.14.1-6
gettext
Fixed versions: 0.14.1-6
gettext
Fixed versions: 0.14.1-6
Complete source record
{
"id": "438678a5f611deaf3579e100cf0de1c8fbf52a680607967cd3e0a658ae25aff6",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2004-0966",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2004-0966",
"summary": "The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.",
"evidence": "osv:DEBIAN-CVE-2004-0966",
"products": [
{
"name": {
"value": "gettext",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.14.1-6",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gettext",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.14.1-6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gettext",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.14.1-6",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2004-0966",
"aliases": [
"DEBIAN-CVE-2004-0966"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.14.1-6"
}
]
}
],
"package": {
"name": "gettext",
"purl": "pkg:deb/debian/gettext?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0966.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.14.1-6"
}
]
}
],
"package": {
"name": "gettext",
"purl": "pkg:deb/debian/gettext?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0966.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.14.1-6"
}
]
}
],
"package": {
"name": "gettext",
"purl": "pkg:deb/debian/gettext?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-0966.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-21T15:47:38.796405855Z",
"provider": "osv",
"upstream": [
"CVE-2004-0966"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2004-0966"
]
},
"related_cves": [
{
"value": "CVE-2004-0966",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 394079,
"published_at": "2005-02-09T05:00:00+00:00"
}