tocsin

Debian/liferea: unknown

Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.

Action: Upgrade liferea to 1.4.6-1 or later.

Affected

introducedfixedlast affected
01.4.6-1-

Fixed versions

1.4.6-1

Sources

published · modified · JSON