tocsin

Debian/myspell: unknown

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/i2my#####.1 and (2) /tmp/i2my#####.2 temporary files.

Action: Upgrade myspell to 1:3.0+pre3.1-21 or later.

Affected

introducedfixedlast affected
01:3.0+pre3.1-21-

Fixed versions

1:3.0+pre3.1-21

Sources

published · modified · JSON