tocsin

Debian/aview: unknown

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file.

Action: Upgrade aview to 1.3.0rc1-8.1 or later.

Affected

introducedfixedlast affected
01.3.0rc1-8.1-

Fixed versions

1.3.0rc1-8.1

Sources

published · modified · JSON