tocsin

Debian/vdr: unknown

vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file.

Action: Upgrade vdr to 1.6.0-6 or later.

Affected

introducedfixedlast affected
01.6.0-6-

Fixed versions

1.6.0-6

Sources

published · modified · JSON