Debian/po4a: unknown

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.

Action: Upgrade po4a to 0.31-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-4462#Debian:14/po4a
• https://security-tracker.debian.org/tracker/CVE-2007-4462

published 2007-08-21T21:17:00Z · modified 2026-10-21T17:47:48.325936602Z · JSON