tocsin

Debian/splitvt: unknown

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

Action: Upgrade splitvt to 1.6.6-4 or later.

Affected

introducedfixedlast affected
01.6.6-4-

Fixed versions

1.6.6-4

Sources

published · modified · JSON