Debian/feynmf: unknown

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.

Action: Upgrade feynmf to 1.08-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5940
• https://security-tracker.debian.org/tracker/CVE-2007-5940

published 2007-11-13T23:46:00Z · modified 2026-10-21T17:47:33.112830249Z · JSON