Candidate: CVE-2013-4251
PublicDate: 2019-11-04 20:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4251
 https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
 https://bugzilla.redhat.com/show_bug.cgi?id=916690
Description:
 The scipy.weave component in SciPy before 0.12.1 creates insecure temporary
 directories.
Ubuntu-Description:
Notes:
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726093
Priority: medium
Discovered-by: Florian Weimer
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]

Patches_python-scipy:
 upstream: https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
upstream_python-scipy: released (0.12.1)
lucid_python-scipy: ignored (reached end-of-life)
precise_python-scipy: ignored (reached end-of-life)
precise/esm_python-scipy: DNE (precise was needed)
quantal_python-scipy: ignored (reached end-of-life)
raring_python-scipy: ignored (reached end-of-life)
saucy_python-scipy: ignored (reached end-of-life)
trusty_python-scipy: not-affected (0.13.3-1build1)
trusty/esm_python-scipy: not-affected (0.13.3-1build1)
utopic_python-scipy: not-affected (0.13.3-1build1)
vivid_python-scipy: not-affected (0.13.3-1build1)
vivid/stable-phone-overlay_python-scipy: DNE
vivid/ubuntu-core_python-scipy: DNE
wily_python-scipy: not-affected (0.13.3-1build1)
xenial_python-scipy: not-affected (0.13.3-1build1)
yakkety_python-scipy: not-affected (0.13.3-1build1)
zesty_python-scipy: not-affected (0.13.3-1build1)
devel_python-scipy: not-affected (0.13.3-1build1)