tocsin

Debian/projectl: unknown

The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack.

Action: Upgrade projectl to 1.001.dfsg1-2 or later.

Affected

introducedfixedlast affected
01.001.dfsg1-2-

Fixed versions

1.001.dfsg1-2

Sources

published · modified · JSON