tocsin

Debian/gpicview: unknown

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file.

Action: Upgrade gpicview to 0.1.9-2 or later.

Affected

introducedfixedlast affected
00.1.9-2-

Fixed versions

0.1.9-2

Sources

published · modified · JSON