tocsin

Debian/pvpgn: unknown

pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

Action: Upgrade pvpgn to 1.8.1-2 or later.

Affected

introducedfixedlast affected
01.8.1-2-

Fixed versions

1.8.1-2

Sources

published · modified · JSON