tocsin

Debian/liquidsoap: unknown

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files

Action: Upgrade liquidsoap to 0.3.8.1+2-2 or later.

Affected

introducedfixedlast affected
00.3.8.1+2-2-

Fixed versions

0.3.8.1+2-2

Sources

published · modified · JSON