tocsin

Debian/zsh: unknown

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Action: Upgrade zsh to 4.3.4-dev-3-2 or later.

Affected

introducedfixedlast affected
04.3.4-dev-3-2-

Fixed versions

4.3.4-dev-3-2

Sources

published · modified · JSON