tocsin

Debian/plait: unknown

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.

Action: Upgrade plait to 1.5.2-2 or later.

Affected

introducedfixedlast affected
01.5.2-2-

Fixed versions

1.5.2-2

Sources

published · modified · JSON