tocsin

Debian/wyrd: unknown

wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file.

Action: Upgrade wyrd to 1.4.3b-4 or later.

Affected

introducedfixedlast affected
01.4.3b-4-

Fixed versions

1.4.3b-4

Sources

published · modified · JSON