tocsin

Debian/emacspeak: unknown

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.

Action: Upgrade emacspeak to 28.0-2 or later.

Affected

introducedfixedlast affected
028.0-2-

Fixed versions

28.0-2

Sources

published · modified · JSON