tocsin

Debian/wml: unknown

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Action: Upgrade wml to 2.0.11-3.1 or later.

Affected

introducedfixedlast affected
02.0.11-3.1-

Fixed versions

2.0.11-3.1

Sources

published · modified · JSON